Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 0 additions & 22 deletions .github/workflows/build.yaml

This file was deleted.

9 changes: 9 additions & 0 deletions .github/workflows/pr-title-check.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
name: PR Title Check

on:
pull_request:
types: [opened, edited, synchronize, reopened]

jobs:
validate:
uses: LayeredCraft/devops-templates/.github/workflows/pr-title-check.yml@main
25 changes: 25 additions & 0 deletions .github/workflows/publish-preview.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,25 @@
name: Publish Preview

on:
workflow_dispatch:
push:
branches:
- main
paths-ignore:
- 'docs/**'
- 'README.md'

permissions: write-all

jobs:
publish:
uses: LayeredCraft/devops-templates/.github/workflows/publish-preview.yml@main
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Pin reusable workflow refs to immutable versions

This workflow (and the other newly added ones) calls external reusable workflows at @main, which is a mutable ref; because these jobs also use secrets: inherit (including NUGET_API_KEY in publish jobs), any upstream change on LayeredCraft/devops-templates can silently alter release behavior or exfiltrate secrets without a change in this repo. Pin these uses: references to an immutable tag or commit SHA to make CI behavior reproducible and prevent supply-chain drift.

Useful? React with 👍 / 👎.

with:
solution: LayeredCraft.Logging.CompactJsonFormatter.slnx
dotnetVersion: |
8.0.x
9.0.x
10.0.x
11.0.x
hasTests: true
secrets: inherit
20 changes: 20 additions & 0 deletions .github/workflows/publish-release.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
name: Publish Release

on:
release:
types: [published]

permissions: write-all

jobs:
publish:
uses: LayeredCraft/devops-templates/.github/workflows/publish-release.yml@main
with:
solution: LayeredCraft.Logging.CompactJsonFormatter.slnx
dotnetVersion: |
8.0.x
9.0.x
10.0.x
11.0.x
hasTests: true
secrets: inherit
20 changes: 20 additions & 0 deletions .github/workflows/release-drafter.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
name: Release Drafter

on:
push:
branches:
- main
pull_request:
types: [opened, edited, synchronize, reopened, ready_for_review]
workflow_dispatch:

permissions:
contents: write
pull-requests: write

jobs:
draft:
uses: LayeredCraft/devops-templates/.github/workflows/release-drafter.yml@main
with:
event_name: ${{ github.event_name }}
pr_draft: ${{ github.event.pull_request.draft == true }}
5 changes: 4 additions & 1 deletion LayeredCraft.Logging.CompactJsonFormatter.slnx
Original file line number Diff line number Diff line change
@@ -1,8 +1,11 @@
<Solution>
<Folder Name="/git/">
<File Path=".github/dependabot.yml" />
<File Path=".github/workflows/build.yaml" />
<File Path=".github/workflows/pr-build.yaml" />
<File Path=".github/workflows/pr-title-check.yaml" />
<File Path=".github/workflows/publish-preview.yaml" />
<File Path=".github/workflows/publish-release.yaml" />
<File Path=".github/workflows/release-drafter.yaml" />
<File Path=".gitignore" />
</Folder>
<Folder Name="/Solution Items/">
Expand Down
Loading