lf-release.yml

name: 'Linuxfabrik: Release'

on:
  push:
    tags:
      - 'v*'

# modify the default permissions granted to the GITHUB_TOKEN
permissions: 'read-all'

jobs:
  release:
    runs-on: 'ubuntu-latest'
    permissions:
      contents: 'write' # to push to the repo and create the release

    steps:

      - name: 'Harden the runner (Audit all outbound calls)'
        uses: 'step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40' # v2.19.0
        with:
          egress-policy: 'audit'

      - name: 'Create GitHub Release for ${{ github.ref_name }}'
        uses: 'softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda' # v3.0.0
        with:
          tag_name: '${{ github.ref_name }}'
          body: |
            Release Notes/CHANGELOG at https://github.com/Linuxfabrik/lfops/blob/main/CHANGELOG.md
          prerelease: false