diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 739962d90f..11f85a86d5 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -1,8 +1,9 @@ name: Publish to PyPI on: - release: - types: [published] + push: + tags: + - 'v*' permissions: contents: read @@ -25,6 +26,9 @@ jobs: fetch-depth: 0 persist-credentials: false + - name: Nuke malformed tag locally + run: git tag -d v.2.3.2 || true + - name: Set up Python uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 with: diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index 21221359de..1bc65383c6 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -1,30 +1,10 @@ -# GitGalaxy Enterprise Security Scanner -# Integration: GitLab CI/CD - -variables: - GITGALAXY_MAX_RISK: "80" - PIP_CACHE_DIR: "$CI_PROJECT_DIR/.cache/pip" - -# Cache pip dependencies between pipeline runs to drastically reduce execution time -cache: - paths: - - .cache/pip - -stages: - - security - -gitgalaxy_scan: - stage: security - image: python:3.12-slim - before_script: - - echo "Installing GitGalaxy Engine..." - - pip install --upgrade pip - - pip install gitgalaxy>=2.4.0 +create-release: + stage: deploy + image: [registry.gitlab.com/gitlab-org/release-cli:latest](https://registry.gitlab.com/gitlab-org/release-cli:latest) + rules: + - if: $CI_COMMIT_TAG script: - - echo "Initiating GitGalaxy Zero-Trust Scan..." - - galaxyscope . --max-risk-exposure $GITGALAXY_MAX_RISK --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results_sarif.json - artifacts: - when: always - reports: - sast: gitgalaxy-results_sarif.json - allow_failure: false \ No newline at end of file + - echo "Publishing CI/CD Catalog Release for $CI_COMMIT_TAG" + release: + tag_name: $CI_COMMIT_TAG + description: "Automated component release synced directly from GitHub Source of Truth." \ No newline at end of file