ci: add update-semver (#66)

Adds splunk/addonfactory-update-semver JIRA: https://splunk.atlassian.net/browse/ADDON-68596
splunk · May 28, 2024 · a43a881 · a43a881
1 parent 315eece
commit a43a881
Showing 1 changed file with 15 additions and 8 deletions.
diff --git a/.github/workflows/build-test-release.yaml b/.github/workflows/build-test-release.yaml
@@ -8,16 +8,20 @@ on:
   pull_request:
     branches: [main, develop]
 
-jobs:
+permissions:
+  contents: write
+  packages: read
+  pull-requests: read
+  statuses: write
 
+jobs:
   compliance-copyrights:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
       - uses: apache/skywalking-eyes@cd7b195c51fd3d6ad52afceb760719ddc6b3ee91 # v0.6.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
   pre-commit:
     runs-on: ubuntu-latest
     steps:
@@ -28,7 +32,6 @@ jobs:
       - run: |
           bash <(curl https://raw.githubusercontent.com/rhysd/actionlint/v1.6.25/scripts/download-actionlint.bash)
       - uses: pre-commit/[email protected]
-
   publish:
     needs:
       - compliance-copyrights
@@ -49,13 +52,17 @@ jobs:
           passphrase: ${{ secrets.SA_GPG_PASSPHRASE }}
           extra_plugins: |
             @google/semantic-release-replace-plugin
-
   update-semver:
     if: startsWith(github.ref, 'refs/tags/v')
     needs: publish
-    permissions:
-      contents: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
-      - uses: haya14busa/action-update-semver@v1
+      - uses: actions/checkout@v4
+      - uses: splunk/addonfactory-update-semver@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GH_TOKEN_ADMIN }}
+        with:
+          git_committer_name: ${{ secrets.SA_GH_USER_NAME }}
+          git_committer_email: ${{ secrets.SA_GH_USER_EMAIL }}
+          gpg_private_key: ${{ secrets.SA_GPG_PRIVATE_KEY }}
+          passphrase: ${{ secrets.SA_GPG_PASSPHRASE }}