|
|
@@ -19,49 +19,6 @@ permissions:
|
|
|
contents: read
|
|
|
|
|
|
jobs:
|
|
|
- check-docs-for-release:
|
|
|
- name: Check Docs for release
|
|
|
- runs-on: ubuntu-latest
|
|
|
- permissions:
|
|
|
- contents: read
|
|
|
- steps:
|
|
|
- - name: Harden the runner (Audit all outbound calls)
|
|
|
- uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
|
|
|
- with:
|
|
|
- egress-policy: audit
|
|
|
-
|
|
|
- - name: Checkout
|
|
|
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
|
- with:
|
|
|
- fetch-depth: 0
|
|
|
-
|
|
|
- - name: Resolve and validate ref
|
|
|
- id: resolve_ref
|
|
|
- env:
|
|
|
- SOURCE_REF: ${{ github.event.inputs.source_ref }}
|
|
|
- run: |
|
|
|
- set -e
|
|
|
- # Try to fetch the ref from remote
|
|
|
- if git fetch origin "$SOURCE_REF"; then
|
|
|
- # Remote ref exists, use it
|
|
|
- RESOLVED_SHA=$(git rev-parse "origin/$SOURCE_REF")
|
|
|
- elif git rev-parse --verify "$SOURCE_REF" >/dev/null 2>&1; then
|
|
|
- # Local ref exists (e.g., a tag)
|
|
|
- RESOLVED_SHA=$(git rev-parse "$SOURCE_REF")
|
|
|
- else
|
|
|
- echo "Error: ref '$SOURCE_REF' not found"
|
|
|
- exit 1
|
|
|
- fi
|
|
|
- echo "Resolved to SHA: $RESOLVED_SHA"
|
|
|
- echo "sha=$RESOLVED_SHA" >> $GITHUB_OUTPUT
|
|
|
-
|
|
|
- - name: Checkout validated ref
|
|
|
- run: git checkout ${{ steps.resolve_ref.outputs.sha }}
|
|
|
- - name: check-docs
|
|
|
- env:
|
|
|
- DOCS_VERSION: ${{ github.event.inputs.version }}
|
|
|
- run: |
|
|
|
- make docs.check
|
|
|
release:
|
|
|
name: Create Release
|
|
|
runs-on: ubuntu-latest
|