What the developer wrote
Authored by Mathias BROUSSET
fix pypi deploy
What changed, and why it matters
This commit removes a single line from a GitHub Actions CI workflow file. The removed line disabled a JFrog deployment option for a Python package publishing job. It is a routine build/pipeline configuration fix with no apparent security relevance.
No security action required. Treat as a normal CI/CD maintenance change.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The change removes jfrog_deployment: true from a reusable workflow call that publishes the ledger_bitcoin Python package. This appears to correct a misconfiguration where the reusable workflow expected only PyPI publishing (publish: true, release: false) and did not support or expect a JFrog deployment flag. The diff is limited to CI/CD metadata and does not touch application code, cryptography, or device firmware.
Changed components
.github/workflows/ci-workflow.ymlInspect captured patch +0 / −1
diff --git a/.github/workflows/ci-workflow.yml b/.github/workflows/ci-workflow.yml
index b26ae87..36afd1e 100644
--- a/.github/workflows/ci-workflow.yml
+++ b/.github/workflows/ci-workflow.yml
@@ -180,7 +180,6 @@ jobs:
with:
package_name: ledger_bitcoin
package_directory: ./bitcoin_client/
- jfrog_deployment: true
release: false
publish: true
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.