Skip to content

Commit 9fd39f9

Browse files
committed
Use built-in gh cli instead of third-party action for release step
Addresses the warning from zizmor: ``` info[superfluous-actions]: action functionality is already included by the runner --> ./.github/workflows/draft-release-flutter.yml:93:15 | 92 | name: Create a new GitHub draft release | --------------------------------------- this step 93 | uses: softprops/action-gh-release@a06a81a | ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ use `gh release` in a script step | = note: audit confidence → High ```
1 parent 6abce4a commit 9fd39f9

2 files changed

Lines changed: 13 additions & 8 deletions

File tree

.github/workflows/draft-release-flutter.yml

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -90,11 +90,13 @@ jobs:
9090

9191
- id: gh_release
9292
name: Create a new GitHub draft release
93-
uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b
9493
if: github.ref_type == 'tag'
95-
with:
96-
draft: true
97-
generate_release_notes: true
94+
env:
95+
GH_TOKEN: ${{ github.token }}
96+
run: |
97+
gh release create "${GITHUB_REF_NAME}" \
98+
--draft \
99+
--generate-notes
98100
99101
- name: Annotate workflow run with draft release URL
100102
env:

.github/workflows/draft-release-rust.yml

Lines changed: 7 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -32,10 +32,13 @@ jobs:
3232

3333
- id: gh_release
3434
name: Create a new GitHub draft release
35-
uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b
36-
with:
37-
draft: true
38-
generate_release_notes: true
35+
if: github.ref_type == 'tag'
36+
env:
37+
GH_TOKEN: ${{ github.token }}
38+
run: |
39+
gh release create "${GITHUB_REF_NAME}" \
40+
--draft \
41+
--generate-notes
3942
4043
- name: Annotate workflow run with draft release URL
4144
env:

0 commit comments

Comments
 (0)