Open andrew-m-leonard opened 1 year ago
Additional post build tasks to consider hanging off of this job:
Additional Post-build task
Also download testing as per https://github.com/adoptium/temurin-build/issues/3506 which includes SBoM validation.
This is currently performed by the standalone download_and_sbom_validation job which uses the release_download_test.sh script
Create a new job "Post-Build" which implements issue, this encompasses all post-build tasks. To this job we will then run a new job "Sign-SBOM" on the "signing node", with the available RSA key.
Publishes Artifacts:
Tasks: