-
Notifications
You must be signed in to change notification settings - Fork 9
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore: Adding workflows for automated releases #68
base: main
Are you sure you want to change the base?
Conversation
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #68 +/- ##
=======================================
Coverage 41.89% 41.89%
=======================================
Files 41 41
Lines 1857 1857
=======================================
Hits 778 778
Misses 1079 1079
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. |
…d instead kicking off the release by merging into main
run: | | ||
if ${{ github.event.head_commit.author.username == 'github-actions[bot]' && startsWith(github.event.head_commit.message, 'chore: Release ') }}; then | ||
VALUE=stable | ||
else | ||
VALUE=unstable | ||
fi | ||
echo "value=$VALUE" >> $GITHUB_OUTPUT |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Use an action instead of an inline script (recommended). For more information visit https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#good-practices-for-mitigating-script-injection-attacks
Event context data that are user controlled must be treated as potentially untrusted input. For more information visit https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#understanding-the-risk-of-script-injections
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Security risk needs to be addressed.
Description of changes:
This PR adds the
release_authenticator.yml
andrelease_kickoff.yml
workflows automating the Release process.Also adding the corresponding Fastlane files.
This is their behaviour:
ComponentInformation
and creating a PR intomain
with these changes for the maintainer to review and mergemain
. When the commit is a result of the previous kickoff PR being merged, a stable releases is performed; all other commits result in an unstable release.X.Y.Z.unstable.i
, withX.Y.Z
being the next tentative version andi
the current iteration of unstable releases.By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.