-
Notifications
You must be signed in to change notification settings - Fork 0
33 lines (28 loc) · 897 Bytes
/
__main-ci.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
name: Internal - Main - Continuous Integration
on:
push:
branches: [main]
tags: ["*"]
permissions:
actions: write
contents: write
pull-requests: write
security-events: write
statuses: write
# FIXME: This is a workaround for having workflow ref. See https://github.com/orgs/community/discussions/38659
id-token: write
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
jobs:
ci:
uses: ./.github/workflows/__shared-ci.yml
secrets: inherit
release:
needs: ci
uses: hoverkraft-tech/ci-github-common/.github/workflows/release-actions.yml@0.13.1
with:
update-all: ${{ (github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')) || github.event_name == 'workflow_dispatch' }}
github-app-id: ${{ vars.CI_BOT_APP_ID }}
secrets:
github-app-key: ${{ secrets.CI_BOT_APP_PRIVATE_KEY }}