Skip to content

CI/CD: Fix attest-build-provenance digest format (v10.4.0) #1908

@ravshansbox

Description

@ravshansbox

Problem

The GitHub Actions workflow fails for all release builds in v10.4.0 at the "Attest artifact" step due to an invalid digest format.

The workflow uses:

This produces a double colon () which is invalid. The correct format is:

Impact

All release builds fail at the attestation step, preventing the creation and publishing of release artifacts (tarballs, .deb packages, etc.) for all platforms.

Root Cause

The bug was introduced in PR #1901 which bumped actions/attest-build-provenance from v3 to v4. The new attestation steps were accidentally written with a double colon instead of a single colon after the e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 prefix.

Fix

See attached PR: https://github.com/sharkdp/fd/pull/XXXX

Related

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions