dakota/.github/workflows/execute-release.yml at bc85a7cc7cee3b3bd806e0b26235a55c0d16cf65 · projectbluefin/dakota · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
name: Execute Release

on:
  pull_request:
    types:
      - closed
    branches:
      - main

permissions:
  actions: read
  contents: write
  id-token: write
  issues: write
  packages: write
  pull-requests: write

jobs:
  execute:
    if: >-
      github.event.pull_request.merged == true &&
      github.event.pull_request.head.ref == 'auto/promote-testing-to-main'
    permissions:
      actions: read
      contents: write
      issues: write
      packages: write
      pull-requests: write
    uses: projectbluefin/actions/.github/workflows/reusable-execute-release.yml@7f79969c2ff74c51ac7f385cb0a86414975308d7 # v1
    with:
      registry: ghcr.io/projectbluefin
      variants: >-
        [
          {"image":"dakota","source_tag":"testing","target_tag":"stable"},
          {"image":"dakota-nvidia","source_tag":"testing","target_tag":"stable"}
        ]
      cosign_identity_regexp: ^https://github\.com/projectbluefin/(dakota|actions)/\.github/workflows/
    secrets: inherit

  release-notes:
    needs: [execute]
    if: always() && needs.execute.result == 'success'
    permissions:
      contents: write
      id-token: write
      packages: read
    uses: projectbluefin/actions/.github/workflows/reusable-release.yml@7f79969c2ff74c51ac7f385cb0a86414975308d7 # v1
    with:
      stream_name: stable
      image: ghcr.io/projectbluefin/dakota
      generate_sbom_inline: true
      checkout_ref: main
      project_name: Dakota
      badge_label: Stable
      accent_color: "#0ea5e9"
      cert_identity_regexp: >-
        ^https://github\.com/projectbluefin/(dakota|actions)/\.github/workflows/
      notable_packages: >-
        [
          {"sbom_name": "kernel", "label": "Kernel"},
          {"sbom_name": "gnome-shell", "label": "GNOME Shell"},
          {"sbom_name": "flatpak", "label": "Flatpak"},
          {"sbom_name": "bootc", "label": "bootc"}
        ]
      docs_url: https://docs.projectbluefin.io/changelogs
    secrets: inherit