Skip to content

Upload PyManager SBOM sidecars named after full artifacts#404

Merged
zooba merged 2 commits into
python:mainfrom
e-q:upload-windows-sbom-sidecars
Jun 22, 2026
Merged

Upload PyManager SBOM sidecars named after full artifacts#404
zooba merged 2 commits into
python:mainfrom
e-q:upload-windows-sbom-sidecars

Conversation

@e-q

@e-q e-q commented Jun 2, 2026

Copy link
Copy Markdown
Contributor

Summary

  • look for PyManager package SBOM sidecars as <artifact>.spdx.json
  • upload the SBOM sidecar next to the corresponding package destination

Closes #399

Tests

  • tox -q -e lint
  • tox -q -e mypy

@python-cla-bot

python-cla-bot Bot commented Jun 2, 2026

Copy link
Copy Markdown

All commit authors signed the Contributor License Agreement.

CLA signed

@e-q e-q changed the title Upload Windows SBOM sidecars named after full artifacts Upload PyManager SBOM sidecars named after full artifacts Jun 22, 2026
@e-q

e-q commented Jun 22, 2026

Copy link
Copy Markdown
Contributor Author

FYI @zooba - Implemented your suggestion here.

@zooba zooba merged commit c4533cb into python:main Jun 22, 2026
18 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Bug: Windows upload skips SBOM sidecars named after the full artifact

2 participants