From 59175c491194045eceef7733527957151204ba05 Mon Sep 17 00:00:00 2001 From: sebasnallar Date: Mon, 7 Sep 2026 10:04:16 -0300 Subject: [PATCH] =?UTF-8?q?fix(publish):=20pin=20GH=5FREPO=20in=20finalize?= =?UTF-8?q?-release=20=E2=80=94=20no=20checkout,=20gh=20can't=20infer=20th?= =?UTF-8?q?e=20repo?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The finalize job never checks out, so gh release create/edit died with 'not a git repository' on the first run where it actually executed (v1.16.1 backfill — builds and registrations all green). GH_REPO makes gh target the repo explicitly. The v1.16.1 release was created manually with that run's digests; the guard keeps re-runs idempotent. Co-Authored-By: Claude Fable 5 --- .github/workflows/publish-images.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/publish-images.yml b/.github/workflows/publish-images.yml index d42dd683..f58c2251 100644 --- a/.github/workflows/publish-images.yml +++ b/.github/workflows/publish-images.yml @@ -153,6 +153,9 @@ jobs: runs-on: ubuntu-24.04 env: GH_TOKEN: ${{ github.token }} + # No checkout in this job: gh infers the repo from git otherwise and dies + # with "not a git repository" — GH_REPO pins it explicitly. + GH_REPO: ${{ github.repository }} TAG: ${{ inputs.existing_tag || github.ref_name }} REGISTRY: public.ecr.aws/nullplatform DIGEST_CONTAINERS: ${{ needs.containers.outputs.image_digest }}