Provenance audit regression — 2026-06-29

[github-actions]

Provenance audit regression — 2026-06-29

Run: https://github.com/mnemom/.github/actions/runs/28362749300

Trusted Publisher verification

• @mnemom/mnemom: no attestations URL on latest version

Next steps

1. Check the workflow run log for specifics.
2. If a package was published without provenance: investigate the publish workflow for that repo.
3. If a repo/path mismatch: verify the npm Trusted Publisher config on npmjs.com matches the expected repo + .github/workflows/publish.yml.
4. Close this issue once resolved.

[github-actions]

Provenance audit re-failed on 2026-07-06. Run: https://github.com/mnemom/.github/actions/runs/28781338312

[github-actions]

Provenance audit re-failed on 2026-07-13. Run: https://github.com/mnemom/.github/actions/runs/29237799699

[github-actions]

Provenance audit re-failed on 2026-07-20. Run: https://github.com/mnemom/.github/actions/runs/29730011809

[github-actions]

Provenance audit re-failed on 2026-07-27. Run: https://github.com/mnemom/.github/actions/runs/30252585775

[github-actions]

Provenance audit re-failed on 2026-08-03. Run: https://github.com/mnemom/.github/actions/runs/30800037028

[github-actions]

Provenance audit re-failed on 2026-08-10. Run: https://github.com/mnemom/.github/actions/runs/31370532236

[github-actions]

Provenance audit re-failed on 2026-08-17. Run: https://github.com/mnemom/.github/actions/runs/32009356888

[github-actions]

Provenance audit re-failed on 2026-08-24. Run: https://github.com/mnemom/.github/actions/runs/32705407107