Summary
Releases should be triggered as a workflow dispatch to enhance visibility, currently it's a task in the Taskfile called release.
When the pipeline is triggered the semantic-release binary should create a new release.
Moving it to the Github Pipeline the commits of semantic-release-bot should also be verified with a GPG signature.
AC's
- Cutting new releases occurring via a workflow dispatch on the main branch.
- Only specific users should be able to cut a new release, ensure some RBAC in place.
Summary
Releases should be triggered as a workflow dispatch to enhance visibility, currently it's a task in the Taskfile called
release.When the pipeline is triggered the semantic-release binary should create a new release.
Moving it to the Github Pipeline the commits of semantic-release-bot should also be verified with a GPG signature.
AC's