INNER CODE UNIT · Go

TestReleasePublishUsesTrustedDefaultBranchWorkflow

minekube/gate · ci_write_token_isolation_test.go:151

func TestReleasePublishUsesTrustedDefaultBranchWorkflow(t *testing.T) {
	releasePlease, err := os.ReadFile(".github/workflows/release-please.yml")
	if err != nil {
		t.Fatal(err)
	}

	contents := string(releasePlease)
	if strings.Contains(contents, "  workflow_dispatch:") {
		t.Fatal("release-please must not be dispatchable from a tag-selected workflow file")
	}
	if !strings.Contains(contents, "repository_dispatch:") ||
		!strings.Contains(contents, "release-please-rerun") {
		t.Fatal("release-please must use a default-branch repository dispatch for reruns")
	}
	if !strings.Contains(contents, "uses: ./.github/workflows/release-publish.yml") {
		t.Fatal("release-please must call the trusted reusable release-publish workflow")
	}
	if strings.Contains(contents, "gh workflow run release-publish.yml") {

View source record →