KofTwentyTwo/gclo
2
0 Fork 0
Code Issues 28 Pull Requests 1 Actions Packages Projects Releases 22 Wiki Activity

Release through the standards' shared Velopack workflow; publish steps fail instead of skipping #76

New Issue
Closed
opened 2026-10-09 22:38:05 +00:00 by KofTwentyTwo · 1 comment
KofTwentyTwo commented 2026-10-09 22:38:05 +00:00 (Migrated from github.com)
Copy link
Copy source

Replace the in-repository build/pack/attest/release in .github/workflows/release.yml with a call to KofTwentyTwo/standards/.github/workflows/release-velopack.yml (standards#5, e8ab30f), which gives SLSA Build L3 provenance and closes standards EX-0004 (K22-CI-30). Keep the gclo-specific publishing (Scoop/Chocolatey manifests PR, Chocolatey push, winget) as caller-side jobs in the release environment, and make a missing secret fail the run rather than skip, so a green release means every channel was published. Part of #62; blocks #67.

Replace the in-repository build/pack/attest/release in `.github/workflows/release.yml` with a call to `KofTwentyTwo/standards/.github/workflows/release-velopack.yml` (standards#5, `e8ab30f`), which gives SLSA Build L3 provenance and closes standards EX-0004 (K22-CI-30). Keep the gclo-specific publishing (Scoop/Chocolatey manifests PR, Chocolatey push, winget) as caller-side jobs in the `release` environment, and make a missing secret **fail the run** rather than skip, so a green release means every channel was published. Part of #62; blocks #67.
KofTwentyTwo commented 2026-10-09 23:03:31 +00:00 (Migrated from github.com)
Copy link
Copy source

Done in #77 (squash 9877622).

Done in #77 (squash `9877622`).
Sign in to join this conversation.
No Branch/Tag Specified
Labels
Clear labels
.NET
Pull requests that update .NET code
 bug
Something isn't working
 deferred
Agreed follow-up, not scheduled
 dependencies
Pull requests that update a dependency file
 documentation
Improvements or additions to documentation
 duplicate
This issue or pull request already exists
 enhancement
New feature or request
 github_actions
Pull requests that update GitHub Actions code
 good first issue
Good for newcomers
 help wanted
Extra attention is needed
 invalid
This doesn't seem right
 needs-owner
Blocked on an action only the owner can take
 priority
Owner-flagged: work this first
 quality
Standards, simplicity, enforcement
 question
Further information is requested
 refactor
Restructuring without behavior change
 release
Release pipeline / distribution
 wontfix
This will not be worked on
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
forge-recovery (Forge Recovery) james.maes (James Maes)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: KofTwentyTwo/gclo#76