python-dependency-manager-companion-mcp-server/.github/workflows/auto-update.yml at main · KemingHe/python-dependency-manager-companion-mcp-server · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
name: Auto Update Orchestrator

on:
  schedule:
    # Tuesday 6pm ET (22:00 UTC, accounting for EST/EDT)
    - cron: '0 22 * * 2'
  workflow_dispatch: {} # Manual trigger for testing

jobs:
  update-docs:
    name: Update Documentation
    # Restrict to home repository and main branch only for security
    if: github.repository == 'KemingHe/python-dependency-manager-companion-mcp-server' && github.ref == 'refs/heads/main'
    permissions:
      contents: write      # Required: commit documentation updates
    uses: ./.github/workflows/auto-update-docs.yml

  update-index:
    name: Update Search Index
    needs: update-docs
    # Restrict to home repository and main branch only for security
    if: github.repository == 'KemingHe/python-dependency-manager-companion-mcp-server' && github.ref == 'refs/heads/main'
    permissions:
      contents: write      # Required: commit search index updates
    uses: ./.github/workflows/auto-update-index.yml

  publish:
    name: Publish Image
    needs: update-index
    # Restrict to home repository and main branch only for security
    if: github.repository == 'KemingHe/python-dependency-manager-companion-mcp-server' && github.ref == 'refs/heads/main'
    permissions:
      contents: read       # Minimum: checkout repository
      attestations: write  # Required: artifact attestation
      id-token: write      # Required: OIDC token for attestation
    uses: ./.github/workflows/auto-update-publish.yml
    secrets: inherit       # Required for workflow accessing env secrets