HttpError: The Dependency graph is disabled for this repository. Please enable it before submitting snapshots. - https://docs.github.com/code-security/supply-chain-security/understanding-your-software-supply-chain/configuring-the-dependency-graph at file:///home/runner/work/_actions/advanced-security/component-detection-dependency-submission-action/v0.1.4/node_modules/@octokit/request/dist-node/index.js:125:1 at processTicksAndRejections (node:internal/process/task_queues:104:5) at L (file:///home/runner/work/_actions/advanced-security/component-detection-dependency-submission-action/v0.1.4/node_modules/@github/dependency-submission-toolkit/dist/index.js:1:1)

The Dependency graph is disabled for this repository. Please enable it before submitting snapshots. - https://docs.github.com/code-security/supply-chain-security/understanding-your-software-supply-chain/configuring-the-dependency-graph

Process completed with exit code 1.

A new Trusted Publisher for the currently running publishing workflow can be created by accessing the following link(s) while logged-in as an owner of the package(s):

Trusted Publishers allows publishing packages to PyPI from automated environments like GitHub Actions without needing to use username/password combinations or API tokens to authenticate with PyPI. Read more: https://docs.pypi.org/trusted-publishers

The workflow was run with the 'attestations: true' input, but an explicit password was also set, disabling Trusted Publishing. As a result, the attestations input is ignored.

{ "manifests": { "requirements.txt": { "resolved": { "pkg:pypi/pyyaml@6.0.3": { "package_url": "pkg:pypi/pyyaml@6.0.3", "relationship": "direct", "scope": "runtime", "dependencies": [] }, "pkg:pypi/typing-extensions@4.16.0": { "package_url": "pkg:pypi/typing-extensions@4.16.0", "relationship": "indirect", "scope": "runtime", "dependencies": [] }, "pkg:pypi/typing-inspection@0.4.4": { "package_url": "pkg:pypi/typing-inspection@0.4.4", "relationship": "indirect", "scope": "runtime", "dependencies": [] }, "pkg:pypi/charset-normalizer@3.5.1": { "package_url": "pkg:pypi/charset-normalizer@3.5.1", "relationship": "direct", "scope": "runtime", "dependencies": [] }, "pkg:pypi/pydantic@2.13.4": { "package_url": "pkg:pypi/pydantic@2.13.4", "relationship": "direct", "scope": "runtime", "dependencies": [ "pkg:pypi/typing-extensions@4.16.0", "pkg:pypi/typing-inspection@0.4.4", "pkg:pypi/pydantic-core@2.46.4", "pkg:pypi/annotated-types@0.8.0" ] }, "pkg:pypi/pydantic-core@2.46.4": { "package_url": "pkg:pypi/pydantic-core@2.46.4", "relationship": "indirect", "scope": "runtime", "dependencies": [] }, "pkg:pypi/annotated-types@0.8.0": { "package_url": "pkg:pypi/annotated-types@0.8.0", "relationship": "indirect", "scope": "runtime", "dependencies": [] }, "pkg:pypi/pydantic@2.14.0b1": { "package_url": "pkg:pypi/pydantic@2.14.0b1", "relationship": "direct", "scope": "runtime", "dependencies": [ "pkg:pypi/pydantic-core@2.48.0" ] }, "pkg:pypi/pydantic-core@2.48.0": { "package_url": "pkg:pypi/pydantic-core@2.48.0", "relationship": "indirect", "scope": "runtime", "dependencies": [] } }, "name": "requirements.txt", "file": { "source_location": "requirements.txt" } } }, "version": 0, "job": { "correlator": "dependency-graph", "id": "32286106765" }, "sha": "c3426a7b0953ac0cb80eafad13d47d8313756554", "ref": "refs/heads/main", "scanned": "2026-08-19T18:13:48.027Z", "detector": { "name": "Component Detection", "version": "0.0.1", "url": "https://github.com/advanced-security/component-detection-dependency-submission-action" } }