Trusted Publisher Workflow #7
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Trusted Publisher Workflow | |
| on: | |
| push: | |
| branches: [master] | |
| paths: | |
| - "packages/mint-components/**" | |
| workflow_dispatch: | |
| inputs: | |
| package: | |
| description: The package to publish | |
| required: true | |
| type: choice | |
| options: | |
| - express-boilerplate | |
| - integration-boilerplate-node | |
| - logger | |
| - mint-components | |
| - program-boilerplate | |
| - program-test-suite | |
| - publish-helper | |
| increment-type: | |
| description: The version number to increment | |
| required: true | |
| type: choice | |
| options: | |
| - prerelease | |
| - patch | |
| - minor | |
| - major | |
| permissions: {} | |
| jobs: | |
| publish-package: | |
| if: github.event_name == 'workflow_dispatch' | |
| uses: ./.github/workflows/publish-package.yml | |
| with: | |
| package: ${{ inputs.package }} | |
| increment-type: ${{ inputs.increment-type }} | |
| permissions: | |
| contents: write # Create commit & tag for edited version number in package.json etc | |
| id-token: write # GCP workload identity federation | |
| mint-components-release: | |
| if: github.event_name == 'push' | |
| uses: ./.github/workflows/mint-components-release.yml | |
| permissions: | |
| contents: write # Push commits to edit version numbers/changelogs | |
| id-token: write # GCP workload identity federation | |
| pull-requests: write # Open a PR |