chainloop-dev · jiparis · Mar 16, 2026 · Mar 16, 2026
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -177,6 +177,9 @@ jobs:
             fi
           done
 
+          # Clean up vulnerability scan files so they don't get picked up by the create-pull-request action
+          rm -f ./vuln-*.json
+
           # Attest the cli binaries
           binaries=$(cat dist/artifacts.json | jq -r '.[] | select(.type=="Binary" and .extra.ID!="binaries-cli") | select(.path | startswith("dist/cli"))  | .path')
           echo "$binaries" | while IFS= read -r entry; do

diff --git a/vuln-artifact-cas-amd64.json b/vuln-artifact-cas-amd64.json
diff --git a/vuln-artifact-cas-arm64.json b/vuln-artifact-cas-arm64.json
diff --git a/vuln-artifact-cas-v1-82-0.json b/vuln-artifact-cas-v1-82-0.json
diff --git a/vuln-artifact-cas-v1-82-1.json b/vuln-artifact-cas-v1-82-1.json
diff --git a/vuln-cli-amd64.json b/vuln-cli-amd64.json
diff --git a/vuln-cli-arm64.json b/vuln-cli-arm64.json
diff --git a/vuln-cli-v1-82-0.json b/vuln-cli-v1-82-0.json
diff --git a/vuln-cli-v1-82-1.json b/vuln-cli-v1-82-1.json
diff --git a/vuln-control-plane-amd64.json b/vuln-control-plane-amd64.json
diff --git a/vuln-control-plane-arm64.json b/vuln-control-plane-arm64.json