From 30ea718e237638f3b0f629df395a9d72d5e63d7b Mon Sep 17 00:00:00 2001
From: Jan Larwig <jan@larwig.com>
Date: Thu, 19 Mar 2026 00:59:56 +0800
Subject: [PATCH] ci: fix trivy failure for release PR

Signed-off-by: Jan Larwig <jan@larwig.com>
---
 .github/workflows/ci.yml | 1 +
 Makefile                 | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 47ca7f93..e0610cad 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -92,6 +92,7 @@ jobs:
         exit-code: '0'
 
     - name: Upload Trivy scan results
+      if: (!startsWith(github.head_ref, 'release'))
       uses: github/codeql-action/upload-sarif@v4
       with:
         sarif_file: 'trivy-results.sarif'
diff --git a/Makefile b/Makefile
index ed9d2186..319d3ddb 100644
--- a/Makefile
+++ b/Makefile
@@ -147,7 +147,7 @@ test: lint ## Run all Go tests
 	GO111MODULE=on $(GO) test $(TESTCOVER) -v -race ./...
 
 .PHONY: release
-release: validate-go-version lint test ## Create a full release for all architectures (binaries and checksums)
+release: validate-go-version ## Create a full release for all architectures (binaries and checksums)
 	BINARY=${BINARY} VERSION=${VERSION} ./dist.sh
 
 .PHONY: clean