fix: add repository fields and enable npm provenance for Sigstore OIDC publishing

texastony · texastony · commit 4daaafb58a71 · 2026-04-23T14:56:12.000-07:00
diff --git a/.github/workflows/prod-release.yml b/.github/workflows/prod-release.yml
@@ -107,6 +107,8 @@ jobs:
       - run: npm ci --unsafe-perm
       - run: npm run build --if-present
       - run: npx lerna publish from-package --yes --dist-tag ${{ github.event.inputs.dist_tag }}
+        env:
+          NPM_CONFIG_PROVENANCE: true
 
   # Once publishing is complete, validate that the published packages are useable
   validate:
diff --git a/modules/branch-keystore-node/package.json b/modules/branch-keystore-node/package.json
@@ -32,5 +32,10 @@
   "types": "./build/main/src/index.d.ts",
   "files": [
     "build/**/src/*"
-  ]
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/branch-keystore-node"
+  }
 }
diff --git a/modules/cache-material/package.json b/modules/cache-material/package.json
@@ -30,5 +30,10 @@
   "types": "./build/main/src/index.d.ts",
   "files": [
     "build/**/src/*"
-  ]
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/cache-material"
+  }
 }
diff --git a/modules/caching-materials-manager-browser/package.json b/modules/caching-materials-manager-browser/package.json
@@ -32,5 +32,10 @@
   "types": "./build/main/src/index.d.ts",
   "files": [
     "build/**/src/*"
-  ]
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/caching-materials-manager-browser"
+  }
 }
diff --git a/modules/caching-materials-manager-node/package.json b/modules/caching-materials-manager-node/package.json
@@ -28,5 +28,10 @@
   "types": "./build/main/src/index.d.ts",
   "files": [
     "build/**/src/*"
-  ]
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/caching-materials-manager-node"
+  }
 }
diff --git a/modules/client-browser/package.json b/modules/client-browser/package.json
@@ -39,5 +39,10 @@
   "types": "./build/main/src/index.d.ts",
   "files": [
     "build/**/src/*"
-  ]
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/client-browser"
+  }
 }
diff --git a/modules/client-node/package.json b/modules/client-node/package.json
@@ -39,5 +39,10 @@
   "types": "./build/main/src/index.d.ts",
   "files": [
     "build/**/src/*"
-  ]
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/client-node"
+  }
 }
diff --git a/modules/decrypt-browser/package.json b/modules/decrypt-browser/package.json
@@ -28,5 +28,10 @@
   "types": "./build/main/src/index.d.ts",
   "files": [
     "build/**/src/*"
-  ]
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/decrypt-browser"
+  }
 }
diff --git a/modules/decrypt-node/package.json b/modules/decrypt-node/package.json
@@ -31,5 +31,10 @@
   "types": "./build/main/src/index.d.ts",
   "files": [
     "build/**/src/*"
-  ]
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/decrypt-node"
+  }
 }
diff --git a/modules/encrypt-browser/package.json b/modules/encrypt-browser/package.json
@@ -29,5 +29,10 @@
   "types": "./build/main/src/index.d.ts",
   "files": [
     "build/**/src/*"
-  ]
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/encrypt-browser"
+  }
 }
diff --git a/modules/encrypt-node/package.json b/modules/encrypt-node/package.json
@@ -30,5 +30,10 @@
   "types": "./build/main/src/index.d.ts",
   "files": [
     "build/**/src/*"
-  ]
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/encrypt-node"
+  }
 }
diff --git a/modules/example-browser/package.json b/modules/example-browser/package.json
@@ -44,5 +44,10 @@
   },
   "main": "./build/main/src/index.js",
   "module": "./build/module/src/index.js",
-  "types": "./build/main/index.d.ts"
+  "types": "./build/main/index.d.ts",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/example-browser"
+  }
 }
diff --git a/modules/example-node/package.json b/modules/example-node/package.json
@@ -27,5 +27,10 @@
   "types": "./build/main/src/index.d.ts",
   "files": [
     "build/**/src/*"
-  ]
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/example-node"
+  }
 }
diff --git a/modules/hkdf-node/package.json b/modules/hkdf-node/package.json
@@ -12,7 +12,11 @@
     "test": "npm run lint && npm run coverage",
     "coverage": "nyc -e .ts npm run mocha"
   },
-  "repository": "",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/hkdf-node"
+  },
   "author": {
     "name": "AWS Crypto Tools Team",
     "email": "aws-cryptools@amazon.com",
diff --git a/modules/integration-browser/package.json b/modules/integration-browser/package.json
@@ -50,5 +50,10 @@
   "files": [
     "build/**/src/*",
     "karma.conf.js"
-  ]
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/integration-browser"
+  }
 }
diff --git a/modules/integration-node/package.json b/modules/integration-node/package.json
@@ -35,5 +35,10 @@
   "bin": "./build/main/src/cli.js",
   "files": [
     "build/**/src/*"
-  ]
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/integration-node"
+  }
 }
diff --git a/modules/integration-vectors/package.json b/modules/integration-vectors/package.json
@@ -33,5 +33,10 @@
     "email": "aws-cryptools@amazon.com",
     "url": "https://aws.amazon.com/javascript/"
   },
-  "license": "Apache-2.0"
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/integration-vectors"
+  }
 }
diff --git a/modules/kdf-ctr-mode-node/package.json b/modules/kdf-ctr-mode-node/package.json
@@ -12,7 +12,11 @@
     "test": "npm run lint && npm run coverage",
     "coverage": "nyc -e .ts npm run mocha"
   },
-  "repository": "",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/kdf-ctr-mode-node"
+  },
   "author": {
     "name": "AWS Crypto Tools Team",
     "email": "aws-cryptools@amazon.com",
diff --git a/modules/kms-keyring-browser/package.json b/modules/kms-keyring-browser/package.json
@@ -31,5 +31,10 @@
   "types": "./build/main/src/index.d.ts",
   "files": [
     "build/**/src/*"
-  ]
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/kms-keyring-browser"
+  }
 }
diff --git a/modules/kms-keyring-node/package.json b/modules/kms-keyring-node/package.json
@@ -35,5 +35,10 @@
   "types": "./build/main/src/index.d.ts",
   "files": [
     "build/**/src/*"
-  ]
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/kms-keyring-node"
+  }
 }
diff --git a/modules/kms-keyring/package.json b/modules/kms-keyring/package.json
@@ -27,5 +27,10 @@
   "types": "./build/main/src/index.d.ts",
   "files": [
     "build/**/src/*"
-  ]
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/kms-keyring"
+  }
 }
diff --git a/modules/material-management-browser/package.json b/modules/material-management-browser/package.json
@@ -22,7 +22,6 @@
     "@aws-crypto/serialize": "file:../serialize",
     "@aws-crypto/web-crypto-backend": "file:../web-crypto-backend",
     "@aws-sdk/util-base64": "^3.374.0",
-    "@aws-sdk/util-base64": "^3.374.0",
     "tslib": "^2.2.0"
   },
   "sideEffects": false,
@@ -31,5 +30,10 @@
   "types": "./build/main/src/index.d.ts",
   "files": [
     "build/**/src/*"
-  ]
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/material-management-browser"
+  }
 }
diff --git a/modules/material-management-node/package.json b/modules/material-management-node/package.json
@@ -29,5 +29,10 @@
   "types": "./build/main/src/index.d.ts",
   "files": [
     "build/**/src/*"
-  ]
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/material-management-node"
+  }
 }
diff --git a/modules/material-management/package.json b/modules/material-management/package.json
@@ -32,5 +32,10 @@
   "types": "./build/main/src/index.d.ts",
   "files": [
     "build/**/src/*"
-  ]
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/material-management"
+  }
 }
diff --git a/modules/raw-aes-keyring-browser/package.json b/modules/raw-aes-keyring-browser/package.json
@@ -32,5 +32,10 @@
   "types": "./build/main/src/index.d.ts",
   "files": [
     "build/**/src/*"
-  ]
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/raw-aes-keyring-browser"
+  }
 }
diff --git a/modules/raw-aes-keyring-node/package.json b/modules/raw-aes-keyring-node/package.json
@@ -29,5 +29,10 @@
   "types": "./build/main/src/index.d.ts",
   "files": [
     "build/**/src/*"
-  ]
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/raw-aes-keyring-node"
+  }
 }
diff --git a/modules/raw-keyring/package.json b/modules/raw-keyring/package.json
@@ -28,5 +28,10 @@
   "types": "./build/main/src/index.d.ts",
   "files": [
     "build/**/src/*"
-  ]
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/raw-keyring"
+  }
 }
diff --git a/modules/raw-rsa-keyring-browser/package.json b/modules/raw-rsa-keyring-browser/package.json
@@ -31,5 +31,10 @@
   "types": "./build/main/src/index.d.ts",
   "files": [
     "build/**/src/*"
-  ]
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/raw-rsa-keyring-browser"
+  }
 }
diff --git a/modules/raw-rsa-keyring-node/package.json b/modules/raw-rsa-keyring-node/package.json
@@ -28,5 +28,10 @@
   "types": "./build/main/src/index.d.ts",
   "files": [
     "build/**/src/*"
-  ]
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/raw-rsa-keyring-node"
+  }
 }
diff --git a/modules/serialize/package.json b/modules/serialize/package.json
@@ -32,5 +32,10 @@
   "types": "./build/main/src/index.d.ts",
   "files": [
     "build/**/src/*"
-  ]
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/serialize"
+  }
 }
diff --git a/modules/web-crypto-backend/package.json b/modules/web-crypto-backend/package.json
@@ -36,5 +36,10 @@
     "plugins": [
       "@typescript-eslint"
     ]
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git",
+    "directory": "modules/web-crypto-backend"
   }
 }
diff --git a/package.json b/package.json
@@ -59,7 +59,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "git@github.com:awslabs/aws-encryption-sdk-javascript.git"
+    "url": "https://github.com/awslabs/aws-encryption-sdk-javascript.git"
   },
   "author": "aws-crypto-tools-team@amazon.com",
   "license": "Apache-2.0",
