Require tagged commits to be on master for package to be published

ALRhub · Oct 29, 2023 · 9d1d925 · 9d1d925
1 parent da55921
commit 9d1d925
Show file tree

Hide file tree

Showing 2 changed files with 28 additions and 0 deletions.
diff --git a/.github/workflows/publish-to-pypi.yml b/.github/workflows/publish-to-pypi.yml
@@ -14,6 +14,20 @@ jobs:
     steps:
     - name: Check out code
       uses: actions/checkout@v4
+      with:
+        fetch-depth: 0  # This fetches all history for all branches and tags
+
+    - name: Verify tag is on master branch
+      run: |
+        TAG_SHA=$(git rev-parse ${{ github.ref }})
+        MASTER_SHA=$(git rev-parse refs/heads/master)
+
+        if [ "$TAG_SHA" == "$MASTER_SHA" ]; then
+          echo "Tag is on the master branch. Proceeding with the workflow."
+        else
+          echo "Tag is not on the master branch. Cancelling the workflow."
+          exit 1
+        fi
 
     - name: Set up Python
       uses: actions/setup-python@v4

diff --git a/.github/workflows/publish-to-test-pypi.yml b/.github/workflows/publish-to-test-pypi.yml
@@ -14,6 +14,20 @@ jobs:
     steps:
     - name: Check out code
       uses: actions/checkout@v4
+      with:
+        fetch-depth: 0  # This fetches all history for all branches and tags
+
+    - name: Verify tag is on master branch
+      run: |
+        TAG_SHA=$(git rev-parse ${{ github.ref }})
+        MASTER_SHA=$(git rev-parse refs/heads/master)
+
+        if [ "$TAG_SHA" == "$MASTER_SHA" ]; then
+          echo "Tag is on the master branch. Proceeding with the workflow."
+        else
+          echo "Tag is not on the master branch. Cancelling the workflow."
+          exit 1
+        fi
 
     - name: Set up Python
       uses: actions/setup-python@v4