Skip to content

Commit c4af4c7

Browse files
fix(ci): prevent SBOM artifact name collision in releases
The sbom-action was configured with artifact-name: "" which does not disable artifact upload but instead generates an auto-incremented name. When matrix jobs run in parallel, these names collide causing a 409 Conflict error. Replace with upload-artifact: false since a dedicated upload-artifact step with unique per-project names already handles the upload.
1 parent 1f382b2 commit c4af4c7

2 files changed

Lines changed: 5 additions & 5 deletions

File tree

.github/workflows/build-agent.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -123,7 +123,7 @@ jobs:
123123
image: shellhubio/agent:${{ env.RELEASE_VERSION }}
124124
format: cyclonedx-json
125125
output-file: sbom-agent-${{ env.RELEASE_VERSION }}.cdx.json
126-
artifact-name: ""
126+
upload-artifact: false
127127

128128
- name: Upload SBOM artifact
129129
uses: actions/upload-artifact@v7
@@ -220,7 +220,7 @@ jobs:
220220
path: ./agent
221221
format: cyclonedx-json
222222
output-file: sbom-agent-source-${{ env.RELEASE_VERSION }}.cdx.json
223-
artifact-name: ""
223+
upload-artifact: false
224224

225225
- name: Upload source SBOM artifact
226226
uses: actions/upload-artifact@v7

.github/workflows/docker-publish.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -48,15 +48,15 @@ jobs:
4848
image: shellhubio/${{ matrix.project }}:${{ env.RELEASE_VERSION }}
4949
format: cyclonedx-json
5050
output-file: sbom-${{ matrix.project }}-${{ env.RELEASE_VERSION }}.cdx.json
51-
artifact-name: ""
51+
upload-artifact: false
5252

5353
- name: Generate SBOM for '${{ matrix.project }}' source
5454
uses: anchore/sbom-action@v0
5555
with:
5656
path: ${{ matrix.project }}
5757
format: cyclonedx-json
5858
output-file: sbom-${{ matrix.project }}-source-${{ env.RELEASE_VERSION }}.cdx.json
59-
artifact-name: ""
59+
upload-artifact: false
6060

6161
- name: Upload SBOM artifacts
6262
uses: actions/upload-artifact@v7
@@ -128,7 +128,7 @@ jobs:
128128
image: registry.infra.ossystems.io/shellhub/api-enterprise:${{ env.RELEASE_VERSION }}
129129
format: cyclonedx-json
130130
output-file: sbom-api-enterprise-${{ env.RELEASE_VERSION }}.cdx.json
131-
artifact-name: ""
131+
upload-artifact: false
132132

133133
- name: Upload SBOM artifact
134134
uses: actions/upload-artifact@v7

0 commit comments

Comments
 (0)