From b0b349271d3bb726b4c5c16f2bfda3d830c0e3ec Mon Sep 17 00:00:00 2001 From: Michael Johnson Date: Mon, 2 Nov 2026 13:08:30 -0500 Subject: [PATCH] ci: sign-manifests runs when the Linux build was skipped --- .github/workflows/daemonless-build.yaml | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/.github/workflows/daemonless-build.yaml b/.github/workflows/daemonless-build.yaml index b40d732..029d75f 100644 --- a/.github/workflows/daemonless-build.yaml +++ b/.github/workflows/daemonless-build.yaml @@ -711,7 +711,12 @@ jobs: # builds; it has a digest of its own, so it is signed once it exists. sign-manifests: needs: [attest-sbom, create-manifests] - if: success() && github.event_name != 'pull_request' + # success() is false when any job upstream was skipped, and build-linux + # (behind create-manifests) is skipped for every FreeBSD-only build: + # the two jobs this needs are asked by name. + if: >- + !cancelled() && needs.attest-sbom.result == 'success' && needs.create-manifests.result == 'success' + && github.event_name != 'pull_request' runs-on: ubuntu-latest permissions: packages: write