Publish #6
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Publishes changes from develop to master. | |
| # | |
| # * Triggers the CD workflow to publish the package if needed. | |
| # * Documentation will be published on the official site. | |
| name: Publish | |
| on: workflow_dispatch | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| environment: production | |
| permissions: | |
| id-token: write # Required by Akeyless | |
| contents: read | |
| packages: read | |
| steps: | |
| - name: Import Secrets | |
| id: import-secrets | |
| uses: LanceMcCarthy/akeyless-action@v3 | |
| with: | |
| access-id: ${{ secrets.GH_AKEYLESS_ACCESS_ID }} | |
| static-secrets: '{ "${{ secrets.GH_AKEYLESS_GH_TOKEN_PATH }}": "GH_TOKEN" }' | |
| export-secrets-to-environment: false | |
| - name: Check out master | |
| uses: actions/checkout@v4 | |
| with: | |
| ref: master | |
| fetch-depth: 0 # Fetch all branches | |
| token: ${{ steps.import-secrets.outputs.GH_TOKEN }} | |
| - name: Fast-forward master to develop | |
| run: | | |
| # TODO: Remove after first sync with master | |
| git checkout origin/develop -- ./tools/release-master | |
| ./tools/release-master |