Skip to content

chore: do not run sbom workflow in forks, fixes #681 #388

chore: do not run sbom workflow in forks, fixes #681

chore: do not run sbom workflow in forks, fixes #681 #388

Triggered via push July 10, 2026 07:13
Status Failure
Total duration 2m 15s
Artifacts 3

publish.yml

on: push
build-dist
34s
build-dist
build-and-push-image
1m 6s
build-and-push-image
provenance  /  detect-env
4s
provenance / detect-env
provenance  /  generator
28s
provenance / generator
provenance  /  upload-assets
provenance / upload-assets
provenance  /  final
2s
provenance / final
Publish to PyPI
0s
Publish to PyPI
Publish to Test PyPI
20s
Publish to Test PyPI
github-publish
0s
github-publish
Fit to window
Zoom out
Zoom in

Annotations

3 warnings and 1 notice
provenance / detect-env
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: slsa-framework/slsa-github-generator/.github/actions/detect-workflow-js@v2.1.0. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
provenance / generator
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: ./__BUILDER_CHECKOUT_DIR__/.github/actions/compute-sha256, ./__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check, actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34, actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
provenance / generator
Restore cache failed: Dependencies file is not found in /home/runner/work/otterdog/otterdog. Supported file pattern: go.sum
Publish to Test PyPI
Generating and uploading digital attestations

Artifacts

Produced during runtime
Name Size Digest
dist
583 KB
sha256:b9569ee79b48014de6ef09073ccfa6a1ea6539d3372b018c7022e10b41d23955
eclipse-csi~otterdog~A04ZGZ.dockerbuild
41.2 KB
sha256:ec60d81a29f433fd8b6b2df4da6bc62d3293eb8ece84cb3de80e0bf30dadcb95
multiple.intoto.jsonl
10.3 KB
sha256:1957a6b9d2a7400505ef40d07d398f8d51e6750143e51a8cfb1a4da98c861e8c