Skip to content

Conversation

@mcollina
Copy link
Member

@mcollina mcollina commented Apr 4, 2024

This PR automate releases and add provenance.

I've put the NPM_TOKEN under the release environment. Currently the three people with permissions are @ronag @Ethan-Arrowood and myself.

I plan to remove the repository-level secret NPM_TOKEN after this lands.

Fixes #3042

mcollina added 4 commits April 4, 2024 11:37
Signed-off-by: Matteo Collina <[email protected]>
Signed-off-by: Matteo Collina <[email protected]>
Signed-off-by: Matteo Collina <[email protected]>
Signed-off-by: Matteo Collina <[email protected]>
@mcollina mcollina requested review from Ethan-Arrowood and ronag April 4, 2024 10:43
@codecov-commenter
Copy link

codecov-commenter commented Apr 4, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

❗ No coverage uploaded for pull request base (main@6df3c73). Click here to learn what that means.
Report is 11 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #3052   +/-   ##
=======================================
  Coverage        ?   93.51%           
=======================================
  Files           ?       89           
  Lines           ?    24331           
  Branches        ?        0           
=======================================
  Hits            ?    22754           
  Misses          ?     1577           
  Partials        ?        0           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@mweberxyz
Copy link
Contributor

Per #3012 the scorecard wants to see

permissions:
  contents: read

defined at the top level of every workflow.

mcollina added 2 commits April 6, 2024 08:08
Signed-off-by: Matteo Collina <[email protected]>
Signed-off-by: Matteo Collina <[email protected]>
@mcollina
Copy link
Member Author

mcollina commented Apr 6, 2024

@ronag @mweberxyz PTAL

Signed-off-by: Matteo Collina <[email protected]>
@mweberxyz
Copy link
Contributor

lgtm

@mcollina mcollina merged commit f51f226 into main Apr 8, 2024
mcollina added a commit that referenced this pull request Apr 8, 2024
@Uzlopak Uzlopak deleted the automated-release branch April 23, 2024 12:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

automate releases

5 participants