fix: remove local paths from release SBOM - #5

Merged

tinkeragora merged 1 commit into

mainfrom

fix_sbom_local_refs

Aug 31, 2026

tinkeragora commented Aug 31, 2026

Member

Summary

normalize CycloneDX component references before release
reject residual local file URIs, duplicate refs, and dangling dependency refs
run the normalization contract in CI and release validation

Verification

ruby -w scripts/test_normalize_cyclonedx_sbom.rb
ruby -w scripts/test_release_workflow.rb
cargo fmt --all -- --check
cargo test --locked --offline
cargo clippy --workspace --all-targets --locked --offline -- -D warnings


          fix: remove local paths from release SBOM

ff8d431

tinkeragora merged commit 939ebd7 into main

7 checks passed

tinkeragora deleted the fix_sbom_local_refs branch

August 31, 2026 05:06

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet