Create release also bumps the rc-tag in the sec-scanners-config on main

[friedrichwilken]

Description

In the GitHub Action workflow Create release we now have a job to bump the sec-scanners-config.yaml and the kustomize file. This only happens on release-branches (e.g. release-1.2), but we now also need the sec-scanners-config.yaml on main to be bumped: the rc-tag needs to be bumped to the release version, when releasing.

Hint: You can reuse most of the logic we already use to bump files on the release branch here:

eventing-manager/.github/workflows/create-release.yml

Line 25 in f99f528

bump-sec-scanners-config:

Reasons

When promoting module releases, some validations need the rc-tag to reflect the version that is about to be release.

AC

• Create release creates a PR to bump the rc-tag on main
• Create release waits for PR to be merged

Attachments

• Create release workflow on main
• Job to bump the sec-scanners-config.yaml and the kustomize file
• the script that is used to bump the sec-scanners-config.yaml