hyungyunlim_obsidian-korean.../.github/workflows/release.yml
hyungyunlim 935d856045 ci: add artifact attestation to release workflow
- Add id-token: write and attestations: write permissions
- Add actions/attest-build-provenance@v2 step for main.js + styles.css
- Bump checkout to v4, setup-node to v4, Node to 20.x

Future releases will include build provenance attestations,
satisfying Obsidian plugin review recommendation.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-13 06:57:10 +09:00

45 lines
931 B
YAML

name: Release Obsidian plugin
on:
push:
tags:
- "*"
jobs:
build:
runs-on: ubuntu-latest
permissions:
contents: write
id-token: write
attestations: write
steps:
- uses: actions/checkout@v4
- name: Use Node.js
uses: actions/setup-node@v4
with:
node-version: "20.x"
- name: Build plugin
run: |
npm install
npm run build
- name: Generate artifact attestations
uses: actions/attest-build-provenance@v2
with:
subject-path: |
main.js
styles.css
- name: Create release
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: |
tag="${GITHUB_REF#refs/tags/}"
gh release create "$tag" \
--title="$tag" \
--generate-notes \
--draft \
main.js manifest.json styles.css