Supply Chain Security - Release workflow

Open GrantBirki opened this issue 1 year ago • 3 comments

About

This pull request implements a complete, and working "release" workflow for rubocop.

Maintainers simply need to run bundle exec rake release and the rubocop gem will be fully built, signed, and released to RubyGems. (This assumes that the version of Rubocop was updated, and a new tag/release can be pushed of course).

Pre-Reqs

Things that need to happen before merging this PR:

Discuss and review here: https://github.com/rubocop/rubocop/issues/14107
Setup Trusted Publishing via RubyGems

related: https://github.com/rubocop/rubocop/issues/14107

Apr 21 '25 19:04 GrantBirki

Sorry for the radio silence here - I'll get to this one eventually. Juggling too many tasks right now.

In the mean time - feedback from @rubocop/rubocop-core on this proposal is welcome!

May 13 '25 05:05 bbatsov

This pull request has been automatically marked as stale because it has not had any recent activity. It will be closed soon if no further activity occurs. Thank you for your contribution and understanding!

Jun 22 '25 02:06 github-actions[bot]

I don't think this should be considered stale.

Jun 22 '25 04:06 GrantBirki