From da9c1ae787cd48790b8813a514c9f91ff43a2c45 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Radim=20H=C3=B6fer?= Date: Fri, 9 Oct 2026 16:14:44 +0200 Subject: [PATCH] ci: install bubblewrap before the release workflow's tests The secret-scan confinement tests (#68) fail rather than skip in CI without bubblewrap. ci.yaml installs it, but the release workflow's verify job didn't, so the v0.20.0 release run failed before building. --- .github/workflows/release.yaml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index a969b145..9aeffca5 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -23,6 +23,14 @@ jobs: - name: Restore Rust cache uses: Swatinem/rust-cache@v2 + # Same as ci.yaml: the secret-scan confinement tests fail (rather than + # skip) in CI without a working bubblewrap. + - name: Install bubblewrap + run: | + sudo apt-get update + sudo apt-get install -y bubblewrap apparmor-profiles + sudo apparmor_parser -r /usr/share/apparmor/extra-profiles/bwrap-userns-restrict + - name: Run tests run: cargo test --locked