d49032b697
All checks were successful
ci/woodpecker/push/build Pipeline was successful
ADR-0002 public flip (infra#20): the three gitleaks history findings are synthetic test fixtures (credential-detector + crypto tests) — ignored by fingerprint. release.yml moves from tag-trigger to workflow_dispatch: svu now auto-cuts tags on every release-worthy push, and implicit PyPI publishes on each bump are not wanted — releases stay deliberate. Dead ci.yml.disabled dropped. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
39 lines
970 B
YAML
39 lines
970 B
YAML
name: Release
|
|
|
|
on:
|
|
workflow_dispatch: {}
|
|
|
|
jobs:
|
|
docker:
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
packages: write
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: docker/setup-buildx-action@v3
|
|
- uses: docker/login-action@v3
|
|
with:
|
|
registry: ghcr.io
|
|
username: ${{ github.actor }}
|
|
password: ${{ secrets.GITHUB_TOKEN }}
|
|
- uses: docker/build-push-action@v6
|
|
with:
|
|
context: .
|
|
file: docker/Dockerfile
|
|
push: true
|
|
tags: |
|
|
ghcr.io/${{ github.repository }}:${{ github.ref_name }}
|
|
ghcr.io/${{ github.repository }}:latest
|
|
|
|
pypi:
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
id-token: write
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-python@v5
|
|
with:
|
|
python-version: "3.12"
|
|
- run: pip install build
|
|
- run: python -m build
|
|
- uses: pypa/gh-action-pypi-publish@release/v1
|