Skip to content

ci: give step permissions to publish lib (#879) #387

ci: give step permissions to publish lib (#879)

ci: give step permissions to publish lib (#879) #387

name: 🎉 Release Please
on:
push:
branches:
- main
permissions:
contents: write
pull-requests: write
jobs:
release_please:
name: 🔖 Release Please
runs-on: ubuntu-latest
outputs:
extension_release_created: ${{ steps.release.outputs['packages/extension--release_created'] }}
lib_release_created: ${{ steps.release.outputs['packages/septic--release_created'] }}
steps:
- name: Create Release
id: release
uses: googleapis/release-please-action@v4
with:
config-file: .github/release-please-config.json
manifest-file: .github/.release-please-manifest.json
- name: Print release outputs for debugging
continue-on-error: true
run: |
echo "Release outputs:"
echo '${{ toJSON(steps.release.outputs) }}' | jq '.' || echo '${{ toJSON(steps.release.outputs) }}'
publish_extension:
name: "Publish Extension"
if: ${{ needs.release_please.outputs.extension_release_created }}
needs: [release_please]
uses: ./.github/workflows/publish-extension.yml
publish_lib:

Check failure on line 34 in .github/workflows/release-please.yml

View workflow run for this annotation

GitHub Actions / 🎉 Release Please

Invalid workflow file

The workflow is not valid. .github/workflows/release-please.yml (Line: 34, Col: 3): Error calling workflow 'equinor/vscode-septic/.github/workflows/publish-lib.yml@5d568818cd276584eb3ab668ad2ca6a60ec78994'. The workflow is requesting 'contents: read', but is only allowed 'contents: none'.
name: "Publish Lib"
if: ${{ needs.release_please.outputs.lib_release_created }}
needs: [release_please]
uses: ./.github/workflows/publish-lib.yml
permissions:
id-token: write