cuda-toolkit/.github/workflows/release.yml at main · hermeticbuild/cuda-toolkit · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
name: Create Release

on:
  # Can be triggered from the tag.yaml workflow
  workflow_call:
    inputs:
      tag_name:
        required: true
        type: string
  # In case of problems, let release engineers retry by manually dispatching
  # the workflow from the GitHub UI
  workflow_dispatch:
    inputs:
      tag_name:
        required: true
        type: string
  # Automatically trigger on new tags matching the pattern v*.*.* (e.g. v1.2.3)
  push:
    tags:
      - "v*.*.*"

permissions:
  id-token: write # Needed to attest provenance
  attestations: write # Needed to attest provenance
  contents: write # Needed to create release

jobs:
  # test:
  #   uses: ./.github/workflows/ci.yaml
  #   secrets:
  #     BUILDBUDDY_API_KEY: ${{ secrets.BUILDBUDDY_API_KEY }}
  release:
    # needs: test
    uses: bazel-contrib/.github/.github/workflows/release_ruleset.yaml@v7.2.2
    with:
      bazel_test_command: true
      prerelease: false
      release_files: |
        cuda-toolkit-*.tar.gz
      tag_name: ${{ inputs.tag_name || github.ref_name }}
  publish:
    # Skip BCR publish for prebuilts tags like llvm-* or prebuilts-extras-*.
    needs: release
    uses: ./.github/workflows/publish.yml
    with:
      tag_name: ${{ inputs.tag_name || github.ref_name }}
    secrets:
      publish_token: ${{ secrets.BCR_PUBLISH_TOKEN }}