Separate builds for source and docs due to dependency differences

Question

Separate builds for source and docs due to dependency differences

Closed this issue 10 months ago · 1 comments

The builds for the documentation need to pull in many more dependencies, from both PyPI and apt. Once the source and docs builds have been moved to GitHub Actions the two should be separated so as not to allow a compromise of a docs dependency to affect the more important source artifact builds.

Requires: #66

From naively building a Docker container for ubuntu:22.04 and running the install scripts as they are in GitHub Actions we see (using Syft):

843 dependencies for docs and source: source-and-docs-deps.txt
171 dependencies for source source-deps.txt

Answer 1 · 2024-04-26T13:43:20.000Z

I separated the source and docs builds and attempted running each release stream: