Hacktoberfest 2026:メンテナが10月に向けて印を付けた、オープンで初心者向けの issue。 Hacktoberfest の issue を見る

Release smoke run failed on every job for v0.1.1; three causes remain after #519

オープン
#593 コメント 0 件 リアクション 0 件 担当者 0 名 GitHub で見る

メンテナーはふだん 1 日以内に返信

まだ誰も着手していません。

評価

難易度
4/5
見積もり時間
3〜5日
初心者へのやさしさ
35/100
issue の種類
バグ
明瞭さ
おおむね明確
活発さ
活発
技術スタック
docker, github-actions, python
領域
ci-cd, release

調査の方向性

Start with release-smoke.yml at lines 281 and 363, then compare its cosign-installer pin with release.yml. Read packaging/README.md and docs/install/container.md to check which release artifacts and image attestations are promised. The issue leaves decisions open about disabling deferred smoke jobs and producing an SBOM attestation; done means resolving those decisions and getting the 0.2.0 smoke run green.

索引モデルが issue の本文から書いたものです。

説明

needs triage

The smoke run after v0.1.1 (run 37169174068, Oct 4) failed in every job except tag parsing.

Job Failed at Cause Fixed by #519
pypi_smoke (darnit) Verify package is in the public set Matrix said darnit, the package is darnit-core Yes
pypi_smoke, other three Verify Sigstore attestation Token uploads have no attestation Yes
container_smoke, both Set up job Bad cosign-installer pin No
binary_smoke, all three Set up job Same bad pin No
homebrew_smoke, both Wait for darnit-tap PR to merge No tap; waits 30 minutes, then fails No
plugin_structural_smoke Download plugin zip The release produces no plugin zip No

What is left after #519

  1. Bad pin. release-smoke.yml:281 and :363 pin sigstore/cosign-installer@0d05a4e36810cebf0e25e51fb1a4ee45ac1b75e2, which GitHub cannot resolve. release.yml pins 7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 for the same v3.10.1, and that one works. I will open a PR for this.
  2. Homebrew, binary and plugin smoke jobs. They run on every stable release, but release.yml does not produce those artifacts (packaging/README.md marks the channels as deferred). They will fail again on 0.2.0. Suggestion: switch them off until the channels exist.
  3. Image SBOM attestation. container_smoke runs cosign verify-attestation on the image. release.yml builds with sbom: false and only runs cosign sign. The step has never been reached because of point 1. I expect it to fail once the pin is fixed, but I have not confirmed that. docs/install/container.md tells users every signed image has an SBOM attestation, so either the release creates one, or the smoke test and the docs stop mentioning it.

Points 2 and 3 need a decision. With them open, the smoke run for 0.2.0 will not be green even with #519 merged.

主要言語
Python
スター
22
フォーク
27
平均マージ
2日 28分
マージ済み PR(30日)
40

環境構築

はじめの一歩

  1. issue を最後まで読み、次にプロジェクトのコントリビューションガイドを読みます。
  2. 着手することを issue にコメントします — 二人が同じ作業をするのを防げます。
  3. リポジトリをフォークし、ブランチを切って変更します。
  4. issue 番号を参照したプルリクエストを送ります。

darnitdevorg/darnit のほかの issue

darnitdevorg/darnit の issue をすべて見る

似ている issue

Python の issue をもっと見る

新しい issue をメールで受け取る

初心者向けの GitHub issue を短くまとめたダイジェスト。