eps-update-devcontainer/.github/workflows/release.yml at main · NHSDigital/eps-update-devcontainer · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
name: release

on:
    workflow_dispatch:
    schedule:
        - cron: "0 8 * * 3"
permissions: {}
jobs:
    get_config_values:
        uses: NHSDigital/eps-common-workflows/.github/workflows/get-repo-config.yml@8b259f4f2d2b8ff1345fb0d2f9b9f0fbb9d19845
        permissions:
            attestations: "read"
            contents: "read"
            packages: "read"
        with:
            verify_published_from_main_image: false

    quality_checks:
        uses: NHSDigital/eps-common-workflows/.github/workflows/quality-checks-devcontainer.yml@8b259f4f2d2b8ff1345fb0d2f9b9f0fbb9d19845
        needs: [ get_config_values ]
        permissions:
            contents: "read"
            packages: "read"
            id-token: "write"
        with:
            pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
        secrets:
            SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

    tag_release:
        needs: [ get_config_values ]
        uses: NHSDigital/eps-common-workflows/.github/workflows/tag-release-devcontainer.yml@8b259f4f2d2b8ff1345fb0d2f9b9f0fbb9d19845
        permissions:
            id-token: "write"
            contents: "write"
            packages: "write"
        with:
            dry_run: false
            pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
            branch_name: main
            tag_format: ${{ needs.get_config_values.outputs.tag_format }}