dave2wave commented on issue #1544: URL: https://github.com/apache/tooling-trusted-releases/issues/1544#issuecomment-5473062450
Let's discuss expectations because we missed with the last similar change. I have to ask: When you release the following to ASF distribution `atr-maven-plugin-1.0.0-beta-1-source-release.zip`, `atr-maven-plugin-1.0.0-beta-1-binary-release.zip`, and `atr-maven-plugin-1.0.0-beta-1-binary-release-with-deps.zip` will they all have `atr-maven-plugin-1.0.0-beta-1-cyclonedx.json` as their SBOM? If so then we can make a rule, but if not then we have to discuss the SBON filenames that match each artifact. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
