fix ci

.github/workflows/build.yml

@@ -7,16 +7,19 @@ on:
     branches: [ main ]
   workflow_dispatch:
 
+permissions: write-all
+
 jobs:
   cancel_previous:
-
+  
     runs-on: ubuntu-latest
     steps:
-      - uses: styfle/[email protected]
-        with:
-          workflow_id: ${{ github.event.workflow.id }}
+    - uses: styfle/[email protected]
+      with:
+        workflow_id: ${{ github.event.workflow.id }}
+
+  build:
 
-  core-test:
     needs: cancel_previous
     runs-on: ubuntu-latest
 
@@ -30,73 +33,8 @@ jobs:
         path: |
           ~/.gradle/caches
           ~/.gradle/wrapper
-        key: ${{ runner.os }}-gradle-core-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
+        key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
         restore-keys: |
-          ${{ runner.os }}-gradle-core-
+          ${{ runner.os }}-gradle-
     - name: Run Tests
-      run: ./gradlew core:test
-    - name: Generate coverage report
-      run: ./gradlew core:codeCoverageReport
-    - name: Upload coverage to Codecov
-      uses: codecov/codecov-action@v2
-
-  android-test:
-    needs: cancel_previous
-    runs-on: ubuntu-latest
-
-    steps:
-      - uses: actions/checkout@v2
-      - name: Grant execute permission for gradlew
-        run: chmod +x gradlew
-      - name: cache gradle dependencies
-        uses: actions/cache@v2
-        with:
-          path: |
-            ~/.gradle/caches
-            ~/.gradle/wrapper
-          key: ${{ runner.os }}-gradle-android-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
-          restore-keys: |
-            ${{ runner.os }}-gradle-android-
-      - name: Run Tests
-        run: ./gradlew android:test
-      - name: Generate coverage report
-        run: ./gradlew android:codeCoverageReport
-      - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v2
-
-  destination-test:
-    needs: cancel_previous
-    runs-on: ubuntu-latest
-
-    steps:
-      - uses: actions/checkout@v2
-      - name: Grant execute permission for gradlew
-        run: chmod +x gradlew
-      - name: cache gradle dependencies
-        uses: actions/cache@v2
-        with:
-          path: |
-            ~/.gradle/caches
-            ~/.gradle/wrapper
-          key: ${{ runner.os }}-gradle-dest-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
-          restore-keys: |
-            ${{ runner.os }}-gradle-dest-
-      - name: Run Tests
-        run: ./gradlew samples:kotlin-android-app-destinations:test
-      - name: Generate coverage report
-        run: ./gradlew samples:kotlin-android-app-destinations:codeCoverageReport
-      - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v2
-
-  security:
-    needs: cancel_previous
-    runs-on: ubuntu-latest
-
-    steps:
-      - uses: actions/checkout@v2
-      - name: Grant execute permission for gradlew
-        run: chmod +x gradlew
-      - name: Snyk
-        run: ./gradlew snyk-test
-        env:
-          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+      run: ./gradlew check

.github/workflows/release.yml

@@ -4,6 +4,8 @@ on:
   push:
     tags:
       - '*.*.*'
+      -
+permissions: write-all
 
 jobs:
   release:
@@ -34,7 +36,7 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-gradle-core-
       - name: Publush release to sonatype
-        run: ./gradlew clean build publish publishToSonatype -Prelease closeAndReleaseSonatypeStagingRepository
+        run: ./gradlew publishToSonatype -Prelease closeAndReleaseSonatypeStagingRepository
         env:
           SIGNING_KEY_ID: ${{ secrets.SIGNING_KEY_ID }}
           SIGNING_KEY_PASSWORD: ${{ secrets.SIGNING_KEY_PASSWORD }}
@@ -46,9 +48,9 @@ jobs:
         run: |
           curl \
              -X POST \
-             -H "Authorization: token $RELEASE_TOKEN" \
+             -H "Authorization: token $GITHUB_TOKEN" \
                 https://api.github.com/repos/${{github.repository}}/releases \
              -d '{"tag_name": "${{ env.RELEASE_VERSION }}", "name": "${{ env.RELEASE_VERSION }}", "body": "Release of version ${{ env.RELEASE_VERSION }}", "draft": false, "prerelease": false, "generate_release_notes": true}'
         env:
-          RELEASE_TOKEN: ${{ secrets.RELEASE_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           RELEASE_VERSION: ${{ steps.vars.outputs.tag }}

.github/workflows/snapshot.yml

@@ -22,7 +22,7 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-gradle-core-
       - name: Publush snapshot to sonatype
-        run: ./gradlew clean build publish publishToSonatype
+        run: ./gradlew publishToSonatype
         env:
           SIGNING_KEY_ID: ${{ secrets.SIGNING_KEY_ID }}
           SIGNING_KEY_PASSWORD: ${{ secrets.SIGNING_KEY_PASSWORD }}