diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index b881937..dcd8be5 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -11,14 +11,18 @@ on: type: string description: 'Enter the Release ticket' required: true + +permissions: + id-token: write # Required for OIDC + contents: read # push: # on push to master branch - # branches: - # - master + # branches: + # - master jobs: release: runs-on: ubuntu-latest - if: contains(fromJSON('["umangmoe", "arshiya-moengage", "badri-engg-data"]'), github.actor) + if: contains(fromJSON('["umangmoe", "arshiya-moengage"]'), github.actor) steps: - name: Checkout sdk automation scripts uses: actions/checkout@v3 @@ -27,10 +31,10 @@ jobs: path: sdk-automation-scripts token: ${{ secrets.SDK_BOT_ACCESS_TOKEN }} - name: Automation script setup - uses: ./sdk-automation-scripts/actions/npm-repository-setup + uses: ./sdk-automation-scripts/actions/npm-repository-setup - name: Checkout code uses: actions/checkout@v3 - with: + with: path: source fetch-depth: 0 fetch-tags: true @@ -45,9 +49,8 @@ jobs: run: | .github/scripts/release.main.kts ${{ github.event.inputs.releaseNotes }} ${{ github.event.inputs.releaseTicket }} env: - NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} GH_TOKEN: ${{ github.token }} - name: Notify release working-directory: source run: | - kotlin .github/scripts/notify-release.main.kts ${{ github.event.inputs.releaseNotes }} \ No newline at end of file + kotlin .github/scripts/notify-release.main.kts ${{ github.event.inputs.releaseNotes }}