build: 🔧 adjust permissions

JamesIves · Jun 13, 2024 · 15c54b1 · 15c54b1
1 parent e4fc8ed
commit 15c54b1
Show file tree

Hide file tree

Showing 2 changed files with 28 additions and 21 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -1,6 +1,8 @@
-name: Build Docker Image
+name: Validate Docker Image
 on:
   push:
+    branches-ignore:
+      - main
   workflow_dispatch:
 jobs:
   build:

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -6,9 +6,33 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - name: Checkout 🛎️
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: "0"
+
+      - name: Bump version and push tag
+        id: create_tag
+        uses: anothrNick/github-tag-action@1.67.0
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          WITH_V: true
+
+          DEFAULT_BUMP: minor
+
+      - name: Create Release
+        id: create_release
+        uses: actions/create-release@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          tag_name: ${{ steps.create_tag.outputs.new_tag }}
+          release_name: ${{ steps.create_tag.outputs.new_tag }}
+          draft: false
+          prerelease: false
 
       - name: Set up Docker Buildx  🛠️
         uses: docker/setup-buildx-action@v1
@@ -90,22 +114,3 @@ jobs:
           context: .
           push: true
           tags: jives/hlds:tfc
-
-      - name: Bump version and push tag
-        id: create_tag
-        uses: anothrNick/github-tag-action@1.34.0
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          WITH_V: true
-          DEFAULT_BUMP: minor
-
-      - name: Create Release
-        id: create_release
-        uses: actions/create-release@v1
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        with:
-          tag_name: ${{ steps.create_tag.outputs.new_tag }}
-          release_name: ${{ steps.create_tag.outputs.new_tag }}
-          draft: false
-          prerelease: false