update actions with dry run options and actions permission

This commit is contained in:
Amy Galles 2025-09-17 14:00:21 -07:00
parent 0864b2deeb
commit f5833eec71
No known key found for this signature in database
GPG Key ID: 00445BCEEB6E92BD

View File

@ -46,6 +46,10 @@ on:
- production - production
- Fastlane Automation Target - Fastlane Automation Target
required: true required: true
dry-run:
description: "Dry-Run, Run the workflow without publishing to the store"
type: boolean
default: false
env: env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
GITHUB_ACTION_RUN_URL: "https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}" GITHUB_ACTION_RUN_URL: "https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}"
@ -54,6 +58,7 @@ permissions:
contents: read contents: read
packages: read packages: read
id-token: write id-token: write
actions: write
jobs: jobs:
promote: promote:
@ -122,6 +127,7 @@ jobs:
echo "$FORMATTED_MESSAGE" >> $GITHUB_ENV echo "$FORMATTED_MESSAGE" >> $GITHUB_ENV
echo "EOF" >> $GITHUB_ENV echo "EOF" >> $GITHUB_ENV
- name: Promote Play Store version to production - name: Promote Play Store version to production
if: ${{ inputs.dry-run == false }}
env: env:
PLAY_KEYSTORE_PASSWORD: ${{ steps.get-kv-secrets.outputs.PLAY-BETA-KEYSTORE-PASSWORD }} PLAY_KEYSTORE_PASSWORD: ${{ steps.get-kv-secrets.outputs.PLAY-BETA-KEYSTORE-PASSWORD }}
PLAY_KEY_PASSWORD: ${{ steps.get-kv-secrets.outputs.PLAY-BETA-KEY-PASSWORD }} PLAY_KEY_PASSWORD: ${{ steps.get-kv-secrets.outputs.PLAY-BETA-KEY-PASSWORD }}
@ -159,6 +165,10 @@ jobs:
track:"$TRACK_FROM" \ track:"$TRACK_FROM" \
trackPromoteTo:"$TRACK_TARGET" trackPromoteTo:"$TRACK_TARGET"
- name: Publish Github Release - name: Enable Publish Github Release Workflow
run: | run: |
if ${{ inputs.dry-run }} ; then
gh workflow view publish-github-release.yml
exit 0
fi
gh workflow enable publish-github-release.yml gh workflow enable publish-github-release.yml