Skip to content

[validation] attach-at-creation proof — SBOM on an immutable release

Pre-release
Pre-release

Choose a tag to compare

View all tags
@scotmatson scotmatson released this 20 Aug 22:09
Immutable release. Only release title and notes can be modified.
sbom-attach-proof
4ca40f4

Demonstrates that a CycloneDX SBOM attached in the gh release create command survives on an IMMUTABLE release — the fix for PR #626. Not a real release; safe to delete after review. Tag is intentionally non-v* so it does not trigger the current SBOM workflow.

Assets 4
Loading