python / release-tools

Scripts for making (C)Python releases
39 stars 33 forks source link

Separate builds for source and docs due to dependency differences #74

Closed sethmlarson closed 6 months ago

sethmlarson commented 11 months ago

The builds for the documentation need to pull in many more dependencies, from both PyPI and apt. Once the source and docs builds have been moved to GitHub Actions the two should be separated so as not to allow a compromise of a docs dependency to affect the more important source artifact builds.

Requires: https://github.com/python/release-tools/issues/66

From naively building a Docker container for ubuntu:22.04 and running the install scripts as they are in GitHub Actions we see (using Syft):

sethmlarson commented 6 months ago

I separated the source and docs builds and attempted running each release stream: