ReviewOS

also looking at this

craft-native/craft

fix(release): attach and verify generated SBOM assets

#294
Merged glennmichael123 wants to merge codex/release-sbom-attachment into main
5 files +108 -18
.github/workflows/ci.ymlmodified+3-0
Changes to .github/workflows/ci.yml
@@ -286,6 +286,9 @@ jobs:
286286 - name: Test complete release manifest verification
287287 run: bun test scripts/release-manifest.test.ts
288288
289 - name: Test release SBOM verification
290 run: bun test scripts/verify-sbom.test.ts
291
289292 integration:
290293 runs-on: ubuntu-latest
291294 needs: [zig-core, typescript-sdk, create-craft, ts-maps]