[ci] Create artifact attestations for builds on backport branches (#36558)
Sebastian "Sebbie" Silbermann committed
May 28, 2026 at 14:05 UTC
6b5ea125577d0f96eecafa53553b1a80172d1a11
1 file changed
+6
-3
.github/workflows/runtime_build_and_test.yml
+6
-3
@@ -2,7 +2,10 @@ name: (Runtime) Build and Test
2
3
on:
4
push:
5
- branches: [main, releases/**]
5
+ branches:
6
+ # release branches (keep in sync with branches that receive artifact attestations)
7
+ - main
8
+ - releases/**
9
pull_request:
10
paths-ignore:
11
- compiler/**
@@ -486,12 +489,12 @@ jobs:
489
if-no-files-found: error
490
- uses: actions/attest-build-provenance@v2
491
# We don't verify builds generated from pull requests not originating from facebook/react.
489
- # However, if the PR lands, the run on `main` will generate the attestation which can then
492
+ # However, if the PR lands, the run on release branches will generate the attestation which can then
493
# be used to download a build via scripts/release/download-experimental-build.js.
494
#
495
# Note that this means that scripts/release/download-experimental-build.js must be run with
496
# --no-verify when downloading a build from a fork.
494
- if: github.event_name == 'push' && github.ref_name == 'main' || github.event.pull_request.head.repo.full_name == github.repository
497
+ if: github.event_name == 'push' && (github.ref_name == 'main' || startsWith(github.ref_name, 'releases/')) || github.event.pull_request.head.repo.full_name == github.repository
498
with:
499
subject-name: artifacts_combined.zip
500
subject-digest: sha256:${{ steps.upload_artifacts_combined.outputs.artifact-digest }}