ReviewOS

also looking at this

craft-native/craft

fix(release): gate registry notification on final artifact checks

#305
Merged glennmichael123 wants to merge codex/release-integration-checks into main
6 files +104 -14
.github/workflows/sbom.ymlmodified+2-7
Changes to .github/workflows/sbom.yml
@@ -50,13 +50,8 @@ jobs:
5050
5151 - name: Validate SBOMs
5252 run: |
53 # Basic validation
54 for file in sbom/*.json; do
55 if [ -f "$file" ]; then
56 echo "Validating $file..."
57 python3 -m json.tool "$file" > /dev/null && echo " ✓ Valid JSON" || echo " ✗ Invalid JSON"
58 fi
59 done
53 VERSION=$(bun -p "require('./package.json').version")
54 bun scripts/verify-sbom.ts sbom "v$VERSION"
6055
6156 - name: Generate SBOM summary
6257 run: |