From ade188d180fc415656f703623f9c313734b532bc Mon Sep 17 00:00:00 2001
From: Philip Hartlieb <philip.hartlieb@gmail.com>
Date: Thu, 29 Oct 2026 13:46:12 -0400
Subject: [PATCH] Create the sbom directory before the repository SBOM

A release without images downloads no image SBOMs into sbom/, and the SBOM action does not create
the directory for its output file, so the first release failed there.
---
 .github/workflows/publish.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 82453c0..f0399a1 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -120,6 +120,9 @@ jobs:
           pattern: image-sbom-*
           path: sbom
           merge-multiple: true
+      # The SBOM action doesn't create its output directory, which exists only when image SBOMs were
+      # downloaded above.
+      - run: mkdir -p sbom
       - uses: anchore/sbom-action@66cbf4bc1f1c0d2edc94016e65bc221b6bb0ad6c # v0.24.3
         with:
           path: .