From c682e765adcc100db2a37232719c59887597e93c Mon Sep 17 00:00:00 2001 From: Brian Love Date: Thu, 18 Jun 2026 14:37:37 -0700 Subject: [PATCH] fix(ci): correct gh release upload flag order in SLSA workflow `--clobber` came after the `--` separator, so gh parsed it as a filename ('no matches found for --clobber') and the build-artifacts job failed, skipping provenance. Move --clobber before -- so it is a flag and the glob stays positional. Co-Authored-By: Claude Opus 4.8 (1M context) --- .github/workflows/release-provenance.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release-provenance.yml b/.github/workflows/release-provenance.yml index cb0094f1..aa7a1e66 100644 --- a/.github/workflows/release-provenance.yml +++ b/.github/workflows/release-provenance.yml @@ -44,7 +44,7 @@ jobs: - name: Upload tarballs to the release env: GH_TOKEN: ${{ github.token }} - run: gh release upload "${{ github.event.release.tag_name }}" -- release-artifacts/*.tgz --clobber + run: gh release upload "${{ github.event.release.tag_name }}" --clobber -- release-artifacts/*.tgz provenance: needs: [build-artifacts]