Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[ci-release] SBOM not uploaded #4817

Closed
yurishkuro opened this issue Oct 7, 2023 · 0 comments · Fixed by #4818
Closed

[ci-release] SBOM not uploaded #4817

yurishkuro opened this issue Oct 7, 2023 · 0 comments · Fixed by #4818

Comments

@yurishkuro
Copy link
Member

After successfully running the release workflow manually, I noticed that SBOM artifact is missing from the release asset. The log from anchore/sbom-action shows

------------------------- Uploading workflow artifacts -------------------------
/tmp/sbom-action-LNFHD1/jaeger-SBOM.spdx.json

but I think this is just the workflow artifact, not a release artifact. The action's documentation mentions it can upload release artifact, but only when running on a release event.

yurishkuro added a commit that referenced this issue Oct 7, 2023
## Which problem is this PR solving?
- Resolves #4814
- Resolves #4817

## Description of the changes
- Set BRANCH=s/main/main_from_fork/ when running on pull requests. This
should solve the problem with CI failing when people submit a PR from a
main branch in their fork, because our CI scripts think it means docker
images should be uploaded and fail on the lack of credentials. Now they
will skip the uploads.
- Move cleanup of android toolchain to the top of the workflow
- Replace the use of `.github/actions/setup-branch` with custom logic to
set BRANCH which is always based on the recent semver tag.
`setup-branch` will still work for non-release workflows.
- Remove unnecessary success checks in the steps (job fails when any
step fails)
- Use `env.BRANCH` as release name in `upload-release-action` action,
instead of `github.ref`
- Manually upload SBOM to the correct release (to solve #4817)

## How was this change tested?
- Will have to run ci-release manually after merge

---------

Signed-off-by: Yuri Shkuro <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant