Skip to content

Comments

ci: fix remove provenance attestation from published package#7

Merged
alevito merged 4 commits intomainfrom
LIVE-24171-zcash-decrypt_fix_permission_to_publish_package_provenance
Feb 6, 2026
Merged

ci: fix remove provenance attestation from published package#7
alevito merged 4 commits intomainfrom
LIVE-24171-zcash-decrypt_fix_permission_to_publish_package_provenance

Conversation

@alevito
Copy link
Collaborator

@alevito alevito commented Feb 5, 2026

Removing provenance attestation from the published package as it requires write permissions.
Provenance attestation will be added in the future if required.

Should fix this pipeline error https://github.com/LedgerHQ/zcash-decrypt/actions/runs/21722043152/job/62654189439#step:11:32

See:

@alevito alevito requested review from acewf and pvoliveira February 5, 2026 17:48
@alevito alevito self-assigned this Feb 5, 2026
@alevito alevito requested a review from a team February 5, 2026 17:48
@ledger-wiz-cspm-secret-detection
Copy link

ledger-wiz-cspm-secret-detection bot commented Feb 5, 2026

Wiz Scan Summary

Scanner Findings
Data Finding Sensitive Data -
Secret Finding Secrets -
IaC Misconfiguration IaC Misconfigurations -
SAST Finding SAST Findings -
Software Management Finding Software Management Findings -
Total -

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

@alevito alevito changed the title ci: fix permission to publish package provenance ci: fix remove provenance attestation from published package Feb 5, 2026
@alevito alevito merged commit 9457bc0 into main Feb 6, 2026
6 checks passed
@alevito alevito deleted the LIVE-24171-zcash-decrypt_fix_permission_to_publish_package_provenance branch February 6, 2026 09:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants