The builds for the documentation need to pull in many more dependencies, from both PyPI and apt. Once the source and docs builds have been moved to GitHub Actions the two should be separated so as not to allow a compromise of a docs dependency to affect the more important source artifact builds.
The builds for the documentation need to pull in many more dependencies, from both PyPI and apt. Once the source and docs builds have been moved to GitHub Actions the two should be separated so as not to allow a compromise of a docs dependency to affect the more important source artifact builds.
Requires: https://github.com/python/release-tools/issues/66
From naively building a Docker container for ubuntu:22.04 and running the install scripts as they are in GitHub Actions we see (using Syft):