anchore/sbom-action attaches SBOMs to GitHub releases, which requires
write access to contents. The workflow previously only had read access,
causing 'Resource not accessible by integration' errors.
- Remove QEMU setup (no ARM cross-compilation needed)
- Build only linux/amd64 (target deployment arch)
- Reduces build time from 35+ min to ~10-15 min
- Reduce timeout back to 30 min
Co-authored-by: Sebastian Noe <sebastian.schneider@boxine.de>
Multi-platform builds with QEMU ARM emulation exceed 30 minutes
for this multi-stage Dockerfile (Ruby gems + Node compilation).
Co-authored-by: Sebastian Noe <sebastian.schneider@boxine.de>
- cosign-installer: use v3.9.2 (d58896d6a186...)
- sbom-action: use v0.18.0 (f325610c9f50...)
Co-authored-by: Sebastian Noe <sebastian.schneider@boxine.de>
Sebastian Noe
Sebastian Noe