Files
jellyfin-vue/.github/workflows/push_release.yml
T
Fernando Fernández f50cbfd60e ci: harden
After the release 3.1.0 release of eps1lon/actions-label-merge-conflict, documentation about how to harden the token was provided.
The action now uses the default GITHUB_TOKEN

Signed-off-by: Fernando Fernández <ferferga@hotmail.com>
2026-06-05 12:43:58 +02:00

65 lines
1.6 KiB
YAML

name: Push & Release 🌍
concurrency:
group: ${{ github.workflow }}-${{ github.event_name == 'push' && github.ref }}
cancel-in-progress: true
on:
release:
types:
- released
- prereleased
push:
branches:
- master
paths-ignore:
- '**/*.md'
jobs:
automation:
name: Automation 🎛️
if: ${{ github.repository == 'jellyfin/jellyfin-vue' }}
uses: ./.github/workflows/__automation.yml
permissions:
contents: read
pull-requests: write
main:
name: ${{ github.event_name == 'push' && 'Unstable 🚀⚠️' || 'Stable 🏷️✅' }}
uses: ./.github/workflows/__package.yml
secrets: inherit
# Needed for attestation publication
permissions:
id-token: write
attestations: write
artifact-metadata: write
with:
commit: ${{ github.event_name == 'push' && github.sha }}
is_prerelease: ${{ github.event_name == 'release' && github.event.action == 'prereleased' }}
tag_name: ${{ github.event_name == 'release' && github.event.release.tag_name }}
push: ${{ github.repository == 'jellyfin/jellyfin-vue' }}
codeql:
name: GitHub CodeQL 🔬
uses: ./.github/workflows/__codeql.yml
permissions:
actions: read
contents: read
security-events: write
with:
commit: ${{ github.sha }}
deploy:
name: Deploy 🚀
if: ${{ github.repository == 'jellyfin/jellyfin-vue' }}
uses: ./.github/workflows/__deploy.yml
needs:
- main
permissions:
contents: read
deployments: write
secrets: inherit
with:
branch: ${{ github.ref_name }}
comment: false