Skip to content

Add repository.url for npm provenance validation#17

Merged
pipedrive-public-gha-bot[bot] merged 2 commits into
masterfrom
CICDL-347-add-repository-url
May 21, 2026
Merged

Add repository.url for npm provenance validation#17
pipedrive-public-gha-bot[bot] merged 2 commits into
masterfrom
CICDL-347-add-repository-url

Conversation

@Moser-ss
Copy link
Copy Markdown
Contributor

Summary

  • Add repository field to package.json with the GitHub repo URL
  • Required by npm sigstore provenance validation during Trusted Publisher publish — without it, npm publish fails with 422: "repository.url" is "", expected to match "https://github.com/pipedrive/create-pipedrive-app"

Test plan

  • Publish workflow succeeds with OIDC provenance after this is merged

🤖 Generated with Claude Code

Copilot AI review requested due to automatic review settings May 21, 2026 14:54
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds the repository metadata to package.json so npm Trusted Publisher / Sigstore provenance validation can match the package to its GitHub repository during npm publish.

Changes:

  • Add repository.type and repository.url to package.json (matching the expected GitHub URL for provenance validation).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

pipedrive-public-gha-bot Bot pushed a commit that referenced this pull request May 21, 2026
@pipedrive-public-gha-bot pipedrive-public-gha-bot Bot merged commit e978af8 into master May 21, 2026
8 checks passed
@pipedrive-public-gha-bot pipedrive-public-gha-bot Bot deleted the CICDL-347-add-repository-url branch May 21, 2026 15:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants