Skip to content

Publish a qualified portable CLI release #68

Description

@open-inspect-leetsoftware

Problem

Tag v0.1.0 exists, but the repository has no GitHub release and therefore no supported portable artifactserver archive. The tagged release workflow run failed in the npm-adapter publication gate:

The workflow had already assembled the portable Node archive, but the release was correctly withheld because the full release gate did not pass. Downstream consumers must not replace it with a source-checkout installation or manually publish unverified assets.

Outcome

Restore the npm publication credentials or trusted-publishing configuration, rerun the tagged release pipeline, and publish a GitHub release whose checksums and attestations include the portable artifact-server-0.1.0-node.tar.gz asset.

Acceptance

  • The tagged release workflow passes all release gates.
  • GitHub release v0.1.0 exists with the portable CLI archive, manifest/SBOM, and SHA256SUMS.
  • A clean environment with Node >=24.12.0 can verify the checksum, extract the archive, and run artifactserver --version without a source checkout.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions