Skip to content

Bumped the version. #42

Bumped the version.

Bumped the version. #42

Workflow file for this run

name: Manual
on:
push:
tags:
- "v[0-9]+.[0-9]+.[0-9]+"
jobs:
semgrep:
runs-on: ubuntu-latest
name: security-sast-semgrep
steps:
- uses: actions/checkout@v2
- name: Semgrep
id: semgrep
uses: returntocorp/semgrep-action@v1
with:
publishToken: ${{ secrets.SEMGREP_APP_TOKEN }}
build:
name: build
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- name: Setup python
uses: actions/setup-python@v2
with:
python-version: 3.7
- name: Run image
uses: abatilo/[email protected]
with:
poetry-version: "1.1.11"
- name: Build
run: |
poetry install
poetry build
- uses: actions/[email protected]
with:
name: dist
path: dist
- uses: actions/[email protected]
with:
name: output
path: output
review_secrets:
name: security-detect-secrets
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v2
with:
submodules: false
fetch-depth: "0"
- name: Trufflehog Actions Scan
uses: edplato/[email protected]
with:
scanArguments: "--max_depth 30 -x .github/workflows/exclude-patterns.txt"
publish:
name: Build Release
needs:
#- pre-commit
#- review_secrets
- semgrep
- build
#- run-unit-tests
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
with:
submodules: false
# Very important: semantic-release won't trigger a tagged
# build if this is not set false
persist-credentials: false
- name: Setup python
uses: actions/setup-python@v2
with:
python-version: "3.7"
- name: Run image
uses: abatilo/[email protected]
with:
poetry-version: "1.1.11"
- name: Build
run: |
poetry install
poetry build
- uses: actions/setup-node@v2
with:
node-version: "14"
- name: Semantic Release
uses: cycjimmy/[email protected]
with:
semantic_version: 17
extra_plugins: |
@semantic-release/exec
@semantic-release/git
@google/semantic-release-replace-plugin
env:
GITHUB_TOKEN: ${{ secrets.SEMREL_TOKEN }}
PYPI_USERNAME: "__token__"
PYPI_TOKEN: ${{ secrets.PYPI_TOKEN }}
update-semver:
name: Move Respository semver tags
if: startsWith(github.ref, 'refs/tags/v')
needs: publish
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- uses: haya14busa/action-update-semver@v1