also looking at this
fix(release): gate registry notification on final artifact checks
#305
6 files
+104
-14
| @@ -50,13 +50,8 @@ jobs: | ||
| 50 | 50 | |
| 51 | 51 | - name: Validate SBOMs |
| 52 | 52 | run: | |
| 53 | # Basic validation | |
| 54 | for file in sbom/*.json; do | |
| 55 | if [ -f "$file" ]; then | |
| 56 | echo "Validating $file..." | |
| 57 | python3 -m json.tool "$file" > /dev/null && echo " ✓ Valid JSON" || echo " ✗ Invalid JSON" | |
| 58 | fi | |
| 59 | done | |
| 53 | VERSION=$(bun -p "require('./package.json').version") | |
| 54 | bun scripts/verify-sbom.ts sbom "v$VERSION" | |
| 60 | 55 | |
| 61 | 56 | - name: Generate SBOM summary |
| 62 | 57 | run: | |