Publish #1
  
    
      This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
      Learn more about bidirectional Unicode characters
    
  
  
    
  | # Publish new releases to Bazel Central Registry. | |
| name: Publish | |
| on: | |
| # Run the publish workflow after a successful release | |
| # Will be triggered from the release.yaml workflow | |
| workflow_call: | |
| inputs: | |
| tag_name: | |
| required: true | |
| type: string | |
| secrets: | |
| publish_token: | |
| required: true | |
| # In case of problems, let release engineers retry by manually dispatching | |
| # the workflow from the GitHub UI | |
| workflow_dispatch: | |
| inputs: | |
| tag_name: | |
| required: true | |
| type: string | |
| jobs: | |
| publish: | |
| uses: bazel-contrib/publish-to-bcr/.github/workflows/[email protected] | |
| with: | |
| tag_name: ${{ inputs.tag_name }} | |
| # GitHub repository which is a fork of the upstream where the Pull Request will be opened. | |
| registry_fork: aspect-build/bazel-central-registry | |
| permissions: | |
| attestations: write | |
| contents: write | |
| id-token: write | |
| secrets: | |
| # Necessary to push to the BCR fork, and to open a pull request against a registry | |
| publish_token: ${{ secrets.BCR_PUBLISH_TOKEN }} |