Skip to content

Only upload SBOM after PyPI release is created - #10280

Closed
radarhere wants to merge 1 commit into
python-pillow:mainfrom
radarhere:sbom_upload
Closed

radarhere wants to merge 1 commit into
python-pillow:mainfrom
radarhere:sbom_upload

Conversation

@radarhere

@radarhere radarhere commented Oct 22, 2026 •

Copy link
Copy Markdown
Member

Resolves #10275

#9885 (comment)

Despite #9748, the first SBOM job failed because there was no release yet:

https://github.com/python-pillow/Pillow/actions/runs/38960170632/job/117219912710

This changes sbom-publish to need pypi-publish, so that the PyPI release exists before it is run.

@radarhere

Copy link
Copy Markdown
Member Author

Closing in light of #10275 (comment)

@radarhere radarhere closed this Oct 22, 2026
@radarhere
radarhere deleted the sbom_upload branch October 22, 2026 12:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Fix attach SBOM to GitHub release again

1 participant