From a2efccc195190b108fa33e8ce92fb742bdfadde1 Mon Sep 17 00:00:00 2001 From: Claude Date: Sat, 24 Oct 2026 10:44:18 +0000 Subject: [PATCH] Attest the Javadoc jar only once The release Javadoc jar is the same file as the one in the Maven layout, and the attestation API rejects duplicate subjects. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01QwfmMR3bsQCfffkJXMD6m2 --- .github/workflows/ci.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 9787653..48d9022 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -255,10 +255,11 @@ jobs: sha256sum * > SHA256SUMS cat SHA256SUMS + # The Javadoc jar of the release is the one in maven/, a subject can appear only once - name: Attest build provenance uses: actions/attest-build-provenance@v4 with: - subject-path: 'release/*.aar, release/*.jar, release/*.apk, maven/**/*.aar, maven/**/*.jar, maven/**/*.pom' + subject-path: 'release/*.aar, release/*.apk, maven/**/*.aar, maven/**/*.jar, maven/**/*.pom' - name: Tag release id: tag