mirror of
https://github.com/ruby/ruby.git
synced 2026-10-28 16:36:20 +08:00
Hiroshi SHIBATAandClaude Opus 4.6
d47d97c938
Restrict the default GITHUB_TOKEN permissions to contents:read for workflows that had no top-level permissions block, as flagged by Scorecard's TokenPermissionsID check. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
22 lines
539 B
YAML
22 lines
539 B
YAML
name: Start release workflow
|
|
on:
|
|
push:
|
|
tags:
|
|
- '*'
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
notify:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Build release package
|
|
run: |
|
|
curl -L -X POST \
|
|
-H "Authorization: Bearer ${{ secrets.MATZBOT_GITHUB_WORKFLOW_TOKEN }}" \
|
|
-H "Accept: application/vnd.github+json" \
|
|
-H "X-GitHub-Api-Version: 2022-11-28" \
|
|
https://api.github.com/repos/ruby/actions/dispatches \
|
|
-d "{\"event_type\": \"$GITHUB_REF\"}"
|