Skip to content

.github/workflows/publish.yml #25031

.github/workflows/publish.yml

.github/workflows/publish.yml #25031

Workflow file for this run

name: Publish release
permissions:
contents: read
on:
workflow_run:
workflows:
- Bazel CI
- Docker CI
- Github/actions CI
- Python CI
- Rust CI
types:
- completed
jobs:
config:
runs-on: ubuntu-24.04
outputs:
run: ${{ steps.outputs.outputs.run }}
release-types: ${{ steps.outputs.outputs.release-types }}
workflows: ${{ steps.outputs.outputs.workflows }}
steps:
- name: Resolve publish config for branch
id: config
uses: envoyproxy/toolshed/actions/jq@23d5a687b43f8984a3fdfd9b494470d80369b538 # actions-v0.4.26
env:
HEAD_BRANCH: ${{ github.event.workflow_run.head_branch || '' }}
with:
input: |
branches:
main:
release-types: actions bazel bins docker python
workflows:
- Bazel CI
- Docker CI
- Github/actions CI
- Python CI
- Rust CI
# Add long-lived release/backport branches here.
# workspace:
# release-types: bazel
# workflows:
# - Bazel CI
input-format: yaml
filter: |
.branches[env.HEAD_BRANCH] as $config
| {
run: ($config != null),
"release-types": ($config["release-types"] // ""),
workflows: (($config.workflows // []) | join("\n"))
}
- name: Emit publish config outputs
id: outputs
env:
CONFIG: ${{ steps.config.outputs.value }}
run: |
echo "run=$(jq -r '.run' <<< "${CONFIG}")" >> "$GITHUB_OUTPUT"
echo "release-types=$(jq -r '."release-types"' <<< "${CONFIG}")" >> "$GITHUB_OUTPUT"
{
echo "workflows<<EOF"
jq -r '.workflows' <<< "${CONFIG}"
echo "EOF"
} >> "$GITHUB_OUTPUT"
publish:
needs:
- config
if: >-
github.event.workflow_run.event == 'push'
&& fromJSON(needs.config.outputs.run)
permissions:
actions: read
contents: read
id-token: write
secrets:
app-id: ${{ secrets.ENVOY_CI_PUBLISH_APP_ID }}
app-key: ${{ secrets.ENVOY_CI_PUBLISH_APP_KEY }}
gpg-key: ${{ secrets.ENVOY_GPG_MAINTAINER_KEY }}
gpg-password: ${{ secrets.ENVOY_GPG_MAINTAINER_KEY_PASSWORD }}
dockerhub-username: ${{ secrets.DOCKERHUB_USERNAME }}
dockerhub-password: ${{ secrets.DOCKERHUB_PASSWORD }}
gcr-key: ${{ secrets.GCP_SERVICE_ACCOUNT_KEY }}
uses: ./.github/workflows/_publish.yml

Check failure on line 86 in .github/workflows/publish.yml

View workflow run for this annotation

GitHub Actions / .github/workflows/publish.yml

Invalid workflow file

error parsing called workflow ".github/workflows/publish.yml" -> "./.github/workflows/_publish.yml" (source branch with sha:068ae67781203b0058441321bc40d7fef23097a3) : (Line: 117, Col: 9): Unrecognized named-value: 'matrix'. Located at position 116 within expression: inputs.conclusion == 'success' && ! inputs.skip && contains(format(' {0} ', inputs.release-types), format(' {0} ', matrix.name))
with:
branch: ${{ github.event.workflow_run.head_branch }}
committer-email: "140627008+publish-envoy[bot]@users.noreply.github.com"
committer-name: "publish-envoy[bot]"
release-types: ${{ needs.config.outputs.release-types }}
workflows: ${{ needs.config.outputs.workflows }}