Conversation
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #68 +/- ##
=======================================
Coverage 41.89% 41.89%
=======================================
Files 41 41
Lines 1857 1857
=======================================
Hits 778 778
Misses 1079 1079
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
…d instead kicking off the release by merging into main
| run: | | ||
| if ${{ github.event.head_commit.author.username == 'github-actions[bot]' && startsWith(github.event.head_commit.message, 'chore: Release ') }}; then | ||
| VALUE=stable | ||
| else | ||
| VALUE=unstable | ||
| fi | ||
| echo "value=$VALUE" >> $GITHUB_OUTPUT |
There was a problem hiding this comment.
Use an action instead of an inline script (recommended). For more information visit https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#good-practices-for-mitigating-script-injection-attacks
Event context data that are user controlled must be treated as potentially untrusted input. For more information visit https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#understanding-the-risk-of-script-injections
harsh62
left a comment
There was a problem hiding this comment.
Security risk needs to be addressed.
Description of changes:
This PR adds the
release_authenticator.ymlandrelease_kickoff.ymlworkflows automating the Release process.Also adding the corresponding Fastlane files.
This is their behaviour:
ComponentInformationand creating a PR intomainwith these changes for the maintainer to review and mergemain. When the commit is a result of the previous kickoff PR being merged, a stable releases is performed; all other commits result in an unstable release.X.Y.Z.unstable.i, withX.Y.Zbeing the next tentative version andithe current iteration of unstable releases.By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.