Skip to content

ci: add OSS Exit Gate RubyGems release workflow #28302

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
alonsopf89 wants to merge 1 commit into from
Closed

ci: add OSS Exit Gate RubyGems release workflow #28302

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
63 changes: 63 additions & 0 deletions .github/workflows/release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,63 @@
name: Release RubyGems via OSS Exit Gate

on:
push:
tags:
- 'v*'
- '*/v*'
workflow_dispatch:

permissions: {}

jobs:
release:
runs-on: ubuntu-latest
permissions:
contents: read
id-token: write
steps:
- name: Checkout repository
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
with:
persist-credentials: false

- name: Set up Ruby
uses: ruby/setup-ruby@d6abfc2fb9c02d7cabae5fde2a3db9d8f4ef3fd2

Check failure on line 25 in .github/workflows/release.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

impostor-commit 

release.yml:25: commit with no history in referenced repository: uses a commit that doesn't belong to the specified org/repo
with:
ruby-version: '3.2'

- name: Authenticate to Google Cloud
uses: google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed
with:
workload_identity_provider: 'projects/305452601764/locations/global/workloadIdentityPools/builders/providers/github'

- name: Set up Cloud SDK
uses: google-github-actions/setup-gcloud@e427ad8a34f8676edf47cf7d7925499adf3eb74f

- name: Build and stage google-api-client gem to OSS Exit Gate
run: |
cd google-api-client
gem build google-api-client.gemspec
GEM_FILE="$(ls google-api-client-*.gem | head -n 1)"
VERSION="${GEM_FILE#google-api-client-}"
VERSION="${VERSION%.gem}"
export GEM_HOST_API_KEY="Bearer $(gcloud auth print-access-token)"
gem push "${GEM_FILE}" \
--host "https://us-ruby.pkg.dev/oss-exit-gate-prod/google-api-ruby-client--rubygems"
cat <<EOF > manifest.json
{
"publish_all": false,
"publishing_groups": [
{
"packages": [
{
"name": "google-api-client",
"version": "${VERSION}"
}
]
}
]
}
EOF
gcloud storage cp manifest.json \
"gs://oss-exit-gate-prod-projects-bucket/google-api-ruby-client/rubygems/manifests/manifest-${{ github.run_id }}-${{ github.run_attempt }}.json"
Loading