remote-apis/.github/workflows/publish-to-bcr.yml at da70a400ac6f45eb6fcaff5337d46f6e3855e2bd · bazelbuild/remote-apis · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
# Publishes to the Bazel Central Registry.
#
# Based on .github/workflows/publish-to-bcr.yml from
# bazel-contrib/rules_scala v7.2.4.
name: Publish to the Bazel Central Registry

on:
  # Run from release.yml.
  workflow_call:
    inputs:
      tag_name:
        required: true
        type: string
    secrets:
      bcr_publish_token:
        required: true

  # In case of problems, enable manual dispatch from the GitHub UI.
  workflow_dispatch:
    inputs:
      tag_name:
        required: true
        type: string

jobs:
  publish-to-bcr:
    uses: bazel-contrib/publish-to-bcr/.github/workflows/publish.yaml@v1.1.0
    with:
      tag_name: ${{ inputs.tag_name }}
      # bazelbuild/bazel-central-registry fork used to open a pull request.
      registry_fork: bazel-io/bazel-central-registry
      # No need to create a draft since PRs are opened by a machine account
      draft: false
    permissions:
      attestations: write
      contents: write
      id-token: write
    secrets:
      # Necessary to push to the BCR fork and open a pull request.
      publish_token: ${{ secrets.bcr_publish_token }}