[IDP-3130] Add scheduled stable release workflow (#85)

* [IDP-3130] Add scheduled stable release workflow

* [IDP-3130] Add scheduled stable release workflow

* [IDP-3311] Use IDP managed secrets solution for workflows

Author: heqianwang

.github/workflows/create-stable-release.yml

@@ -0,0 +1,13 @@
+name: Create stable release
+
+on:
+  schedule:
+    - cron: "0 3 * * 0" # At 03:00 on Sunday
+  workflow_dispatch:
+
+jobs:
+  create-release:
+    permissions:
+      contents: write
+      id-token: write
+    uses: workleap/wl-reusable-workflows/.github/workflows/create-stable-release.yml@main

.github/workflows/jira.yml

@@ -10,4 +10,6 @@ jobs:
     uses: workleap/wl-reusable-workflows/.github/workflows/reusable-jira-workflow.yml@main
     with:
       branch_name: ${{ github.head_ref }}
-    secrets: inherit
+    permissions:
+      contents: read
+      id-token: write

.github/workflows/publish.yml

@@ -40,4 +40,6 @@ jobs:
     uses: workleap/wl-reusable-workflows/.github/workflows/linearb-deployment.yml@main
     with:
       environment: "release"
-    secrets: inherit
+    permissions:
+      id-token: write
+      contents: read