chore(release): run release after a successfull CI flow and add prove…

…nance
marcalexiei · Oct 27, 2024 · 3508675 · 3508675
1 parent ecf1382
commit 3508675
Show file tree

Hide file tree

Showing 2 changed files with 26 additions and 3 deletions.
diff --git a/.changeset/dry-peas-brake.md b/.changeset/dry-peas-brake.md
@@ -0,0 +1,5 @@
+---
+'eslint-plugin-react-import': patch
+---
+
+add provenance to published releases
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -1,15 +1,25 @@
 name: Release
 
 on:
-  push:
-    branches:
-      - main
+  workflow_run:
+    workflows: [CI]
+    types: [completed]
+    branches: [main]
 
 concurrency: ${{ github.workflow }}-${{ github.ref }}
 
+permissions:
+  contents: write
+  pull-requests: write
+  id-token: write # added for provenance
+
+env:
+  HUSKY: 0
+
 jobs:
   release:
     name: Release
+    if: ${{ github.event.workflow_run.conclusion == 'success' }}
     runs-on: ubuntu-latest
 
     steps:
@@ -31,3 +41,11 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.CHANGESET_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true
+
+  on-ci-fail:
+    name: "Failure"
+    runs-on: ubuntu-latest
+    if: ${{ github.event.workflow_run.conclusion == 'failure' }}
+    steps:
+      - run: echo 'CI failed. Release won't be executed'