Skip to content

fix(release): install cosign before the rivet fetch - #42

Merged
avrabe merged 1 commit into
mainfrom
fix/release-cosign-order
Aug 12, 2026
Merged

fix(release): install cosign before the rivet fetch#42
avrabe merged 1 commit into
mainfrom
fix/release-cosign-order

Conversation

@avrabe

@avrabe avrabe commented Aug 12, 2026

Copy link
Copy Markdown
Contributor

v0.17.0 release hotfix — the new rivet-fetch step (REQ-TRACEPACK-001) uses cosign but Install cosign ran after it (cosign: command not found). Moved cosign install ahead of the fetch. Workflow-file-only; code unchanged (already CI-green at v0.17.0).

🤖 Generated with Claude Code

…hotfix)

The v0.17.0 release failed: the new "Fetch rivet" step (REQ-TRACEPACK-001)
verifies rivet's release with `cosign verify-blob`, but the "Install cosign"
step ran later in the job — `cosign: command not found`. Moved the single
Install cosign step ahead of the rivet fetch; it stays installed for the later
SHA256SUMS signing. No other change.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019TNtfRjLNhEz82G2ggeeNu
@avrabe
avrabe merged commit 76cca6f into main Aug 12, 2026
8 checks passed
@avrabe
avrabe deleted the fix/release-cosign-order branch August 12, 2026 20:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant