Skip to content

Chore: stop a Docker Hub description failure failing the release - #57

Merged
SandObserver merged 1 commit into
mainfrom
chore/release-sbom-before-dockerhub
Aug 13, 2026
Merged

SandObserver merged 1 commit into
mainfrom
chore/release-sbom-before-dockerhub

Conversation

@SandObserver

Copy link
Copy Markdown
Owner

Summary

  • Move the Upload SBOM step ahead of both Docker Hub description steps, so the artifact is uploaded before anything that talks to the Hub API.
  • Set continue-on-error: true on Update the Docker Hub description, leaving the generation step a hard failure.
  • Correct the step comments: the credential needs permission to edit repository metadata and returns 403, not 401, and the stable-tag gate covers any pre-release, not only a candidate.

Testing
All green. No new coverage; the change is workflow step ordering, and scripts/dockerhub-description.js is unchanged and already covered.

Checklist

  • Stays within the project constraints: one container, no runtime dependencies, no build step (see CONTRIBUTING.md).
  • Tests added or updated for new logic, and the full suite, lint, and typechecks pass.
  • Docs updated if behavior or configuration changed.
  • CHANGELOG.md updated under Unreleased if the change is user-visible.

The description update sat between the SBOM generation and its upload, so a
rejection from Docker Hub skipped the upload and marked a release whose image
was already built, pushed and signed as failed.

Move the SBOM upload ahead of both description steps and let the update
continue on error.
@SandObserver SandObserver added the github_actions Pull requests that update GitHub Actions code label Aug 13, 2026
@SandObserver
SandObserver merged commit 565ed71 into main Aug 13, 2026
3 checks passed
@SandObserver
SandObserver deleted the chore/release-sbom-before-dockerhub branch August 13, 2026 03:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant