Watch
1
0
Fork
You've already forked RedFlag
0

ci: move release artifacts to the v3 actions

upload-artifact v4 aborts with GHESNotSupportedError against a non-github.com server, so the web job died on every tag since v0.2.8.2 and build and publish were skipped.

No release has ever been produced here; v3 uploads work today.
This commit is contained in:
Fimeg 2026-09-03 18:49:30 -04:00
commit 2b1e90e39b

View file

@ -190,7 +190,7 @@ jobs:
cp -r web/dist server/internal/webui/dist cp -r web/dist server/internal/webui/dist
test -s server/internal/webui/dist/index.html test -s server/internal/webui/dist/index.html
test -d server/internal/webui/dist/assets test -d server/internal/webui/dist/assets
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 - uses: actions/upload-artifact@ff15f0306b3f739f7b6fd43fb5d26cd321bd4de5 # v3
with: with:
name: webui-dist name: webui-dist
path: server/internal/webui/dist path: server/internal/webui/dist
@ -221,7 +221,7 @@ jobs:
cargo install cargo-audit --locked cargo install cargo-audit --locked
- name: Dependency gate + posture - name: Dependency gate + posture
run: scripts/dep-scan.sh --posture-out server/internal/services/posture-build.json run: scripts/dep-scan.sh --posture-out server/internal/services/posture-build.json
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 - uses: actions/upload-artifact@ff15f0306b3f739f7b6fd43fb5d26cd321bd4de5 # v3
with: with:
name: supply-chain-posture name: supply-chain-posture
path: server/internal/services/posture-build.json path: server/internal/services/posture-build.json
@ -287,7 +287,7 @@ jobs:
run: pip3 install --break-system-packages cargo-zigbuild run: pip3 install --break-system-packages cargo-zigbuild
- name: Download web UI - name: Download web UI
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3
with: with:
name: webui-dist name: webui-dist
path: server/internal/webui/dist path: server/internal/webui/dist
@ -295,7 +295,7 @@ jobs:
# Embed the attested supply-chain posture (replaces the committed # Embed the attested supply-chain posture (replaces the committed
# attested:false stub) so the running server signs an honest posture. # attested:false stub) so the running server signs an honest posture.
- name: Download supply-chain posture - name: Download supply-chain posture
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3
with: with:
name: supply-chain-posture name: supply-chain-posture
path: server/internal/services path: server/internal/services
@ -479,7 +479,7 @@ jobs:
echo "Artifact snippet:" echo "Artifact snippet:"
cat "release-${{ matrix.suffix }}.artifacts.json" cat "release-${{ matrix.suffix }}.artifacts.json"
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 - uses: actions/upload-artifact@ff15f0306b3f739f7b6fd43fb5d26cd321bd4de5 # v3
with: with:
name: release-${{ matrix.suffix }} name: release-${{ matrix.suffix }}
path: dist/redflag-*-${{ matrix.suffix }}* path: dist/redflag-*-${{ matrix.suffix }}*
@ -497,7 +497,7 @@ jobs:
fetch-depth: 0 fetch-depth: 0
- name: Download all artifacts - name: Download all artifacts
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3
with: with:
path: artifacts path: artifacts