mirror of
https://github.com/emmansun/gmsm.git
synced 2025-09-23 15:23:49 +08:00
e7dec29898
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.13.0 to 2.13.1.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](ec9f2d5744...f4a75cfd61)
---
updated-dependencies:
- dependency-name: step-security/harden-runner
dependency-version: 2.13.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
38 lines
1.0 KiB
YAML
38 lines
1.0 KiB
YAML
name: Pre-Release Sync
|
|
|
|
on:
|
|
workflow_dispatch: # Manual trigger
|
|
|
|
permissions:
|
|
contents: write
|
|
pull-requests: write
|
|
|
|
jobs:
|
|
develop-to-main-sync:
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: Harden the runner (Audit all outbound calls)
|
|
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
|
|
with:
|
|
egress-policy: audit
|
|
|
|
- name: Checkout main branch
|
|
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
|
|
with:
|
|
ref: main
|
|
|
|
- name: Reset develop branch
|
|
run: |
|
|
git fetch origin develop:develop
|
|
git reset --hard develop
|
|
|
|
- name: Create PR from develop to main
|
|
uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8
|
|
with:
|
|
token: ${{ secrets.GITHUB_TOKEN }}
|
|
title: "Merge develop into main"
|
|
body: "This PR merges changes from develop into main."
|
|
branch: sync-develop-to-main
|
|
delete-branch: true
|