Transferring service and controller vulnerabilities to cosv (#2894) #11
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Create release | |
| on: | |
| push: | |
| tags: | |
| - 'v*' | |
| env: | |
| GPG_SEC: ${{ secrets.PGP_SEC }} | |
| GPG_PASSWORD: ${{ secrets.PGP_PASSWORD }} | |
| OSSRH_USERNAME: ${{ secrets.SONATYPE_USER }} | |
| OSSRH_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }} | |
| jobs: | |
| release: | |
| name: Build release | |
| runs-on: ubuntu-20.04 | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| with: | |
| # release workflow should have access to all tags | |
| fetch-depth: 0 | |
| - name: Set up JDK 17 | |
| uses: actions/setup-java@v3 | |
| with: | |
| java-version: 17 | |
| distribution: temurin | |
| - name: Status git before | |
| run: git status | |
| - name: gradle release | |
| uses: gradle/gradle-build-action@v2 | |
| with: | |
| gradle-version: wrapper | |
| arguments: | | |
| --build-cache | |
| --console=rich | |
| -Prelease | |
| -PgprUser=${{ github.actor }} | |
| -PgprKey=${{ secrets.GITHUB_TOKEN }} | |
| publishToSonatype | |
| closeAndReleaseSonatypeStagingRepository | |
| - name: Status git after | |
| if: ${{ always() }} | |
| run: git status | |
| - name: Upload artifact | |
| id: upload_artifact | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: save-api-${{ runner.os }} | |
| path: save-api/build/* | |
| retention-days: 1 |