@plainconceptsplatform/workflows 1.2.2 → 1.2.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -276,6 +276,9 @@ jobs:
|
|
|
276
276
|
with:
|
|
277
277
|
format: cyclonedx-json
|
|
278
278
|
artifact-name: ${{ env.SBOM_ARTIFACT_NAME }}
|
|
279
|
+
# On a tag that already has a GitHub Release the action attaches the SBOM to it, which
|
|
280
|
+
# needs contents: write this workflow does not have, and fails the run that gates deploy.
|
|
281
|
+
upload-release-assets: false
|
|
279
282
|
|
|
280
283
|
# A bot pull request is opened with GITHUB_TOKEN, and GitHub delivers no workflow_run event
|
|
281
284
|
# for the CI runs that follow (the run's actor is the bot). The router's CI-completion route
|
|
@@ -206,6 +206,9 @@ jobs:
|
|
|
206
206
|
with:
|
|
207
207
|
format: cyclonedx-json
|
|
208
208
|
artifact-name: ${{ env.SBOM_ARTIFACT_NAME }}
|
|
209
|
+
# On a tag that already has a GitHub Release the action attaches the SBOM to it, which
|
|
210
|
+
# needs contents: write this workflow does not have, and fails the run that gates deploy.
|
|
211
|
+
upload-release-assets: false
|
|
209
212
|
|
|
210
213
|
# A bot pull request is opened with GITHUB_TOKEN, and GitHub delivers no workflow_run event
|
|
211
214
|
# for the CI runs that follow (the run's actor is the bot). The router's CI-completion route
|