ci(publish): set GH_REPO so the SBOM attach step works without a checkout

Your AI's guard dog to stop it from going rogue.

Brought to you by: doberman

#487 ci(publish): set GH_REPO so the SBOM attach step works without a checkout

Status: closed

Owner: nobody

Labels: None

Updated: 2026-08-27

Created: 2026-08-27

Creator: Anonymous

Private: No

Originally created by: fu351

Follow-up to [#486]. The v0.18.4 manual publish reached PyPI, but the SBOM attach step failed: the publish job has no checkout, so gh release upload cannot infer the repository. One env line fixes it. The v0.18.4 SBOM was attached to the release by hand.

Tickets: ~~#486~~

Discussion

Anonymous - 2026-08-27

Ticket changed by: fu351

status: open --> closed
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

ci(publish): set GH_REPO so the SBOM attach step works without a checkout

Your AI's guard dog to stop it from going rogue.

Milestone

Searches

Help

#487 ci(publish): set GH_REPO so the SBOM attach step works without a checkout

Related

Discussion