on_push.yml

# This is workflow runs on push
#
name: Release

# Controls when the action will run.
on:
  # Trigger workflow for pull requests.
  push:
    branches: [main, next, beta, alpha]

  # Allows you to run this workflow manually from the Actions tab
  workflow_dispatch:

concurrency:
  group: ${{ github.ref || github.run_id }}
  cancel-in-progress: true

jobs:
  npm-lint:
    name: '▶️ actions'
    uses: ./.github/workflows/npm-lint.yml

  codeql:
    name: '▶️ actions'
    uses: ./.github/workflows/codeql.yml
    permissions:
      actions: read
      contents: read
      security-events: write

  docker:
    name: '▶️ actions'
    needs: [npm-lint]
    uses: ./.github/workflows/docker.yml
    permissions:
      contents: read
      packages: write

  release:
    name: '▶️ actions'
    needs: [npm-lint, docker, codeql]
    uses: ./.github/workflows/semantic-release.yml
    secrets:
      NPM_TOKEN: ${{ secrets.NPM_TOKEN  }}
      GH_TOKEN: ${{ secrets.GH_TOKEN  }}
    permissions:
      contents: write
      issues: write
      pull-requests: write
      packages: write