plugin-tools

plugin-tools copied to clipboard

This is to address inconsistency in our CI and Release workflows so we just have to maintain build-action as well as some security improvements (getting flagged by tooling)

### Tasks
- [ ] Update [ci.yaml](https://github.com/grafana/plugin-tools/blob/main/packages/create-plugin/templates/github/ci/.github/workflows/release.yml) to use https://github.com/grafana/plugin-actions/blob/main/build-plugin/action.yml
- [x] Update [build-action](https://github.com/grafana/plugin-actions/blob/main/build-plugin/action.yml) versions i.e. setup-node -> v4
- [x] Add top level `permissions: read-all` and job level `permissions: contents: write` as appropriate

Created some quick PRs which cover everything except consolidation.

@sympatheticmoose I think we can close this as the remaining task in the list looks to be fixed in this PR?

@jackw https://github.com/grafana/plugin-tools/blob/main/packages/create-plugin/templates/github/workflows/ci.yml still seems to not use it?

Have added it to the task list. 👍

Not sure how best to handle adding plugin-actions to ci.yml. Probably needs splitting up cos it has dependencies on other scaffolded workflows.