Skip to content

fix: update CSP directives #211

fix: update CSP directives

fix: update CSP directives #211

Workflow file for this run

name: release
on:
pull_request:
branches:
- main
types:
- closed
jobs:
verify-run:
runs-on: ubuntu-latest
# We run release action only if:
# 1. PR comes from internal branch (i.e. not a fork)
# 2. PR is merged (a PR can be closed but not merged)
# 3. PR branch name begins with "release/"
if: |
github.event.pull_request.head.repo.full_name == github.repository &&
github.event.pull_request.merged == true &&
startsWith(github.event.pull_request.head.ref, 'release/')
outputs:
version: ${{ steps.version.outputs.result }}
is-prerelease: ${{ contains(steps.version.outputs.result, 'next') }}
steps:
- name: extract-version
id: version
uses: actions/[email protected]
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
script: |
return context.payload.pull_request.title.replace(/release\: /, '');
prerelease:

Check failure on line 30 in .github/workflows/release.yml

View workflow run for this annotation

GitHub Actions / release

Invalid workflow file

The workflow is not valid. .github/workflows/release.yml (Line: 30, Col: 3): Error calling workflow 'aws-amplify/discord-bot/.github/workflows/release-env.yml@d140fbdea8a9728c1a90727b14228c61be544e29'. The nested job 'release-env' is requesting 'contents: write, id-token: write', but is only allowed 'contents: read, id-token: none'.
needs: verify-run
uses: ./.github/workflows/release-env.yml
secrets: inherit
with:
env: next
version: ${{ needs.verify-run.outputs.version }}
is-prerelease: true
release:
needs: [verify-run, prerelease]
if: ${{ fromJSON(needs.verify-run.outputs.is-prerelease) == false }}
uses: ./.github/workflows/release-env.yml
secrets: inherit
with:
env: main
version: ${{ needs.verify-run.outputs.version }}
is-prerelease: false