TT-16964 - remove sbom job from release workflow #962

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged

bsten-tyk merged 5 commits into master from fix/TT-16964/remove-sbom-job

Apr 14, 2026

Merged

TT-16964 - remove sbom job from release workflow #962

fix: use unpinned tags in Dockerfile.distroless per code review

SonarQubeCloud / SonarCloud Code Analysis failed Apr 14, 2026 in 27s

Quality Gate failed

Failed conditions
C Security Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

Annotations

Check warning on line 10 in .github/workflows/ci-test.yml

sonarqubecloud / SonarCloud Code Analysis

Move this read permission from workflow level to job level.

See more on https://sonarcloud.io/project/issues?id=TykTechnologies_tyk-pump&issues=AZ2LTXCrXJkIqGYU4kIy&open=AZ2LTXCrXJkIqGYU4kIy&pullRequest=962

Check warning on line 27 in .github/workflows/release.yml

sonarqubecloud / SonarCloud Code Analysis

Move this read permission from workflow level to job level.

See more on https://sonarcloud.io/project/issues?id=TykTechnologies_tyk-pump&issues=AZ2LTXELXJkIqGYU4kI0&open=AZ2LTXELXJkIqGYU4kI0&pullRequest=962

Check warning on line 15 in .github/workflows/linter.yaml

sonarqubecloud / SonarCloud Code Analysis

Move this write permission from workflow level to job level.

See more on https://sonarcloud.io/project/issues?id=TykTechnologies_tyk-pump&issues=AZ2LTXDkXJkIqGYU4kIz&open=AZ2LTXDkXJkIqGYU4kIz&pullRequest=962

View more details on SonarQubeCloud