Spring Security Release Tools

Shared workflows, Libraries and plugins for managing automated releases of Spring projects.

Shared Workflows

The shared workflows in this repository use the following secrets:

• GH_ACTIONS_REPO_TOKEN: A GitHub PAT (personal access token) used for updating the repository, including accessing repository contents, opening and closing milestones and creating GitHub releases. The token must belong to a user that is part of the spring-projects GitHub organization, and requires the following permissions for fine-grained personal access tokens:
  • Contents: Read and write
  • Issues: Read and write

Plugins

• spring-security-release-plugin (docs)
• spring-security-maven-plugin (docs)

Libraries

• spring-security-release-tools-core (see javadoc for SpringReleases.java)
• github-api (see javadoc for GitHubApi.java)
• sagan-api (see javadoc for SaganApi.java)