fix: create dist-release dir before SBOM output writes

anchore/sbom-action does not create the output directory — the v0.8.1 run scanned images fine (lowercase owner works) but ENOENT'd writing dist-release/sbom-*.cdx.json. Generated with [Devin](https://devin.ai) Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Merge pull request #38 from Dvorinka/release/v0.8.1
2026-10-28 15:51:23 +00:00 · 2026-09-28 16:00:00 +02:00 · 2026-09-28 15:48:12 +02:00
1 changed files with 2 additions and 0 deletions
@@ -339,6 +339,8 @@ jobs:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
+      # anchore/sbom-action does not create the output directory.
+      - run: mkdir -p dist-release
      - uses: anchore/sbom-action@v0
        with:
          image: ghcr.io/${{ env.GHCR_OWNER }}/primora-backend:${{ needs.verify.outputs.version }}