-
Notifications
You must be signed in to change notification settings - Fork 17
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
🤖 Automatically create GH release after cnquery bump #1520
Conversation
Signed-off-by: Christian Zunker <[email protected]>
.github/workflows/gh-release.yaml
Outdated
tag_name: ${{ env.RELEASE_VERSION }} | ||
generate_release_notes: true | ||
make_latest: true | ||
token: ${{ secrets.GH_BUILDER_TOKEN }} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'm not sure about this token...
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
As discussed:
I switched to the app token, as we already use it cnspec:
cnspec/.github/workflows/pr-test-lint.yml
Line 138 in 2b0dd2a
# fetch a token for the mondoo-mergebot app |
This way, we can trigger a release in cnspec from this event. cnspec requires the cnquery container to do its own release. Related-to mondoohq/cnspec#1520 Signed-off-by: Christian Zunker <[email protected]>
This is based on the workflow we already use for the packer-plugin-release: https://github.com/mondoohq/packer-plugin-cnspec/blob/main/.github/workflows/gh-release.yaml |
workflow_dispatch: | ||
|
||
env: | ||
# C07QZDJFF89 == #release-coordination |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Has the slack token privilege to write to this channel?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
yes, slack token has privileges for the whole org
Signed-off-by: Christian Zunker <[email protected]>
This way, we can trigger a release in cnspec from this event. cnspec requires the cnquery container to do its own release. Related-to mondoohq/cnspec#1520 Signed-off-by: Christian Zunker <[email protected]>
Signed-off-by: Christian Zunker <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM, thank you @czunker!
No description provided.