Files
nginx/.github/workflows/check-version-bump.yaml
T
Andrew Clayton 8f3465ac7f GH: explicitly set permissions in workflows
These will override the default repo/org GITHUB_TOKEN scope.
2026-06-30 19:36:43 +01:00

27 lines
687 B
YAML

name: Check Version Bump
on:
pull_request:
types: [ opened, synchronize ]
permissions:
contents: read
jobs:
check-version-bump:
runs-on: ubuntu-24.04
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
with:
fetch-depth: 0
- name: Check git log
run: |
echo "## Check for 'Version bump' commit" >${GITHUB_STEP_SUMMARY}
subj=$(git log --format=%s $(git describe --abbrev=0 --tags).. | tail -1)
if ! expr "$subj" : 'Version bump' >/dev/null
then
echo "❌ No 'Version bump' commit immediately after release tag" | tee -a ${GITHUB_STEP_SUMMARY}
exit 2
fi