push: Verify site CA on registration #227
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: CI | |
| on: | |
| push: | |
| branches: | |
| - '**' # ignore tags - release.yml handles them (eventually) | |
| pull_request: | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| jobs: | |
| ci: | |
| uses: ./.github/workflows/ci-reusable.yml | |
| images: | |
| # Only publish images once CI is green, and never for pull requests | |
| # (fork PRs must not get registry credentials anyway). | |
| needs: ci | |
| if: github.event_name == 'push' && github.ref == 'refs/heads/master' | |
| uses: ./.github/workflows/images-reusable.yml | |
| permissions: | |
| contents: read | |
| id-token: write | |
| packages: write | |
| helm: | |
| # Only release the helm chart once images have been successfully pushed | |
| needs: images | |
| if: github.event_name == 'push' && github.ref == 'refs/heads/master' | |
| uses: ./.github/workflows/helm-release-reusable.yml | |
| permissions: | |
| contents: read | |
| packages: write | |
| with: | |
| version: 0.0.0-master |