Skip to content

ci: verify stage1 release attestations after publish#18

Merged
cypherair merged 1 commit into
carry/cypherair-arm64e-toolchain-stable-1.96from
codex/stage1-publish-attestation-fix
Jun 18, 2026
Merged

ci: verify stage1 release attestations after publish#18
cypherair merged 1 commit into
carry/cypherair-arm64e-toolchain-stable-1.96from
codex/stage1-publish-attestation-fix

Conversation

@cypherair

Copy link
Copy Markdown
Owner

Summary

  • Keep build-provenance attestation checks on the downloaded host artifacts.
  • Move gh release verify-asset to after the draft prerelease is published, when GitHub release asset attestations can exist.
  • Check the uploaded release asset list and clean up any failed published release/tag.

Validation

  • YAML parses locally.
  • git diff --check passes.

This fixes the failed publish job from run 27742055113, where both host builds succeeded but release asset verification ran too early against a draft release.

@cypherair cypherair merged commit abeb845 into carry/cypherair-arm64e-toolchain-stable-1.96 Jun 18, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant