chore: do not run sbom workflow in forks, fixes #681 #388
publish.yml
on: push
prepare
30s
build-and-push-image
1m 6s
Publish to PyPI
0s
Publish to Test PyPI
20s
github-publish
0s
Annotations
3 warnings and 1 notice
|
provenance / detect-env
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: slsa-framework/slsa-github-generator/.github/actions/detect-workflow-js@v2.1.0. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
provenance / generator
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: ./__BUILDER_CHECKOUT_DIR__/.github/actions/compute-sha256, ./__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check, actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34, actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
provenance / generator
Restore cache failed: Dependencies file is not found in /home/runner/work/otterdog/otterdog. Supported file pattern: go.sum
|
|
Publish to Test PyPI
Generating and uploading digital attestations
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
dist
|
583 KB |
sha256:b9569ee79b48014de6ef09073ccfa6a1ea6539d3372b018c7022e10b41d23955
|
|
|
eclipse-csi~otterdog~A04ZGZ.dockerbuild
|
41.2 KB |
sha256:ec60d81a29f433fd8b6b2df4da6bc62d3293eb8ece84cb3de80e0bf30dadcb95
|
|
|
multiple.intoto.jsonl
|
10.3 KB |
sha256:1957a6b9d2a7400505ef40d07d398f8d51e6750143e51a8cfb1a4da98c861e8c
|
|