body verification for rekor v2 entries (#1530) #795

	name: Release

	on:
	push:
	branches:
	- main

	concurrency: ${{ github.workflow }}-${{ github.ref }}

	permissions:
	contents: read

	jobs:
	release:
	name: Release package
	runs-on: ubuntu-latest
	permissions:
	contents: write
	pull-requests: write
	id-token: write
	steps:
	- name: Checkout source
	uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1

	- name: Setup node
	uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
	with:
	node-version: 20
	registry-url: 'https://registry.npmjs.org'
	cache: npm

	- name: Install npm w/ OIDC support
	run: \|
	npm install -g npm@^11.5.0

	- name: Install dependencies
	run: npm ci

	- name: Create Release Pull Request
	uses: changesets/action@e0145edc7d9d8679003495b11f87bd8ef63c0cba # v1.5.3
	with:
	publish: npm run release
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Provide feedback