Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func EnsureInCI ¶
func EnsureInCI()
func PublishTag ¶
func PublishTag(tagName string)
PublishTag creates a release tag locally and pushes it to the GitHub remote. The credentials used for the push are fetched from the environment via ReleasePushCredentials, which prefers TAG_TOKEN (HTTPS) and falls back to DEPLOY_KEY (SSH).
func ReleasePushCredentials ¶ added in v0.6.0
func ReleasePushCredentials() (deployKey, tagToken string)
ReleasePushCredentials returns the credentials used to push a release tag. Reads TAG_TOKEN (preferred) and the legacy DEPLOY_KEY. Exactly one of the returned values will be non-empty: when both env vars are set, TAG_TOKEN wins and a warning is logged so the workflow can be cleaned up. Panics if neither credential is set.
As a defense-in-depth measure, both TAG_TOKEN and DEPLOY_KEY are unset from the process environment after being read. This keeps the credential confined to the returned strings (and from there, to the git child process during the push) rather than letting it be inherited by every subsequent child process (goreleaser, gh, etc.) that go-make spawns.
func ReleaseTagInput ¶ added in v0.6.0
func ReleaseTagInput() string
ReleaseTagInput returns the validated release tag name from the RELEASE_VERSION environment variable. Panics if missing or not semver.
Types ¶
This section is empty.
Source Files