From 9f44fe0e57f43714241b5f29c3c701d3c4ba5dab Mon Sep 17 00:00:00 2001 From: Ole Kristian Losvik Date: Sat, 25 Jul 2026 19:37:25 +0200 Subject: [PATCH] fix(cli): add repository field so provenance validates on publish MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit lectio-docs was missing `repository`, so OIDC publishing failed provenance validation — npm checks package.json repository.url against the sigstore attestation from GitHub Actions. Matches the core packages' metadata. Co-Authored-By: Claude Opus 4.8 --- apps/site-builder/package.json | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/apps/site-builder/package.json b/apps/site-builder/package.json index 9d63351..2dfe808 100644 --- a/apps/site-builder/package.json +++ b/apps/site-builder/package.json @@ -3,6 +3,11 @@ "version": "0.2.0", "description": "Run one command, get a docs site: collects scattered repo docs and builds a static, searchable site.", "license": "MIT", + "repository": { + "type": "git", + "url": "https://github.com/losol/lectio-docs.git", + "directory": "apps/site-builder" + }, "type": "module", "bin": { "lectio": "./bin/lectio.mjs"