mirror of
https://github.com/outbackdingo/firezone.git
synced 2026-01-27 10:18:54 +00:00
d26df944c0
To improve supply-chain security, reference all GitHub actions using the hash of the released tag. GitHub recommends to do this for third-party actions (https://docs.github.com/en/actions/security-for-github-actions/security-guides/security-hardening-for-github-actions#using-third-party-actions). In order to make our CI more deterministic, I opted to do it for all our actions. This means any change to our workflow configuration requires a source code change and thus passing CI on our end. Dependabot will automatically issue PRs for these actions and update the comment with the new version next to them. Resolves: #2497.
37 lines
1.1 KiB
YAML
37 lines
1.1 KiB
YAML
name: Create Sentry releases
|
|
run-name: Triggered by ${{ github.actor }}
|
|
on:
|
|
release:
|
|
types:
|
|
- published
|
|
|
|
concurrency:
|
|
group: "publish-production-${{ github.event_name }}-${{ github.workflow }}-${{ github.ref }}"
|
|
cancel-in-progress: false
|
|
|
|
jobs:
|
|
create_sentry_release:
|
|
name: create_${{ matrix.component }}_sentry_release
|
|
runs-on: ubuntu-22.04
|
|
strategy:
|
|
matrix:
|
|
include:
|
|
- component: gateway
|
|
projects: gateway
|
|
- component: gui-client
|
|
projects: gui-client
|
|
- component: headless-client
|
|
projects: headless-client
|
|
- component: macos-client
|
|
projects: apple-client
|
|
steps:
|
|
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
|
with:
|
|
fetch-depth: 0
|
|
- uses: ./.github/actions/create-sentry-release
|
|
if: ${{ startsWith(github.event.release.name, matrix.component) }}
|
|
with:
|
|
component: ${{ matrix.component }}
|
|
projects: ${{ matrix.projects }}
|
|
sentry_token: ${{ secrets.SENTRY_AUTH_TOKEN }}
|