Merge pull request #170 from aaronsb/fix/attest-all-assets

fix(ci): attest all installable assets (styles.css/manifest.json), not just main.js
This commit is contained in:
Aaron Bockelie 2026-05-16 12:26:14 -05:00 committed by GitHub
commit 00d17a6a06
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -64,8 +64,14 @@ jobs:
if: steps.check_tag.outputs.exists == 'false'
uses: actions/attest-build-provenance@v2
with:
# Attest every asset Obsidian installs (main.js, manifest.json,
# styles.css) plus the .mcpb bundles. The portal flags any
# installable asset lacking attestation — #164 originally missed
# styles.css/manifest.json.
subject-path: |
main.js
manifest.json
styles.css
obsidian-mcp-${{ steps.version.outputs.version }}.mcpb
obsidian-mcp.mcpb