Skip to content

chore: add an ADR to document workflow/job names (#260) #2

chore: add an ADR to document workflow/job names (#260)

chore: add an ADR to document workflow/job names (#260) #2

Workflow file for this run

name: Release
on:
push:
branches:
- main
# Permissions for the GITHUB_TOKEN used by the workflow.
permissions:
contents: read # Allows reading the content of the repository.
packages: read # Allows reading the content of the repository's packages.
id-token: write
jobs:
tag-new-version:
permissions: write-all
runs-on: ubuntu-latest
outputs:
release_created: ${{ steps.release-flag.outputs.release_created }}
steps:
- name: Create Release Tag
id: tag
uses: googleapis/release-please-action@7987652d64b4581673a76e33ad5e98e3dd56832f # v4.1.3
- id: release-flag
run: echo "release_created=${{ steps.tag.outputs.release_created || false }}" >> $GITHUB_OUTPUT
publish:

Check failure on line 27 in .github/workflows/release.yaml

View workflow run for this annotation

GitHub Actions / Release

Invalid workflow file

The workflow is not valid. .github/workflows/release.yaml (Line: 27, Col: 3): Error calling workflow 'defenseunicorns/uds-common/.github/workflows/callable-publish.yaml@0685c7cac904ebe5f746770f9488210498d4463d'. The nested job 'run' is requesting 'packages: write', but is only allowed 'packages: read'.
needs: tag-new-version
if: ${{ needs.tag-new-version.outputs.release_created == 'true' }}
strategy:
matrix:
flavor: [upstream, registry1, unicorn]
uses: ./.github/workflows/callable-publish.yaml
with:
flavor: ${{ matrix.flavor }}
secrets: inherit # Inherits all secrets from the parent workflow.