From 43d83ed061d5819dcfed130610f733d4745ff860 Mon Sep 17 00:00:00 2001 From: Aaron Bockelie Date: Sat, 16 May 2026 12:25:13 -0500 Subject: [PATCH] fix(ci): attest styles.css and manifest.json, not just main.js Follow-up to #164. Obsidian's portal flags every installable release asset lacking a build-provenance attestation. #164 attested main.js + the .mcpb bundles but missed styles.css and manifest.json, leaving a standing 'styles.css release asset does not have a GitHub artifact attestation' recommendation. Attest the full installable set. --- .github/workflows/release.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index a6f1334..191c01b 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -64,8 +64,14 @@ jobs: if: steps.check_tag.outputs.exists == 'false' uses: actions/attest-build-provenance@v2 with: + # Attest every asset Obsidian installs (main.js, manifest.json, + # styles.css) plus the .mcpb bundles. The portal flags any + # installable asset lacking attestation — #164 originally missed + # styles.css/manifest.json. subject-path: | main.js + manifest.json + styles.css obsidian-mcp-${{ steps.version.outputs.version }}.mcpb obsidian-mcp.mcpb