Skip to content

Conversation

@ankushkumar11
Copy link

Add separate release workflow for supply_chain_tools

  • Add tools_release_prep.sh script to create tools-only archives
  • Add tools_release.yml workflow for independent supply_chain_tools releases
  • Create .bcr/tools/ directory with BCR configuration files
  • Use supply_chain_tools-v{version} tag format to separate from main releases
  • Generate archives containing only /tools folder content with correct strip_prefix
  • Enable independent versioning and release cycle for supply_chain_tools module

This allows supply_chain_tools to be released independently of the main supply-chain
project and package_metadata, providing users with focused releases for just the
tools functionality including gather_metadata and sbom utilities.

@tonyaiuto
Copy link

Let's resolve what we want to accomplish in #111 first.

git commit -m "Release supply_chain_tools v${VERSION}"

# 3. Push supply_chain_tools release tag
git tag "supply_chain_tools-v${VERSION}" "HEAD"
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

git tag "tools-${VERSION}" "HEAD"

GIT_COMMITTER_EMAIL: "${{ github.actor_id }}+${{ github.actor }}@users.noreply.github.com"
run: |
# 1. Download `buildozer`
curl -o "${RUNNER_TEMP}/buildozer" -L "https://github.com/bazelbuild/buildtools/releases/download/v7.3.1/buildozer-linux-amd64"

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Buildozer is overkill. We should be able to rewrite the version with sed.

@aiuto
Copy link
Collaborator

aiuto commented Nov 28, 2025

@ankushkumar11 Any thoughts. We do want to have distinct releases for each sup-component of the project, but let's ahve a worked out plan first. in #111

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants