gnezim/clawsec
1
0
Fork 0
mirror of https://github.com/prompt-security/clawsec.git synced 2026-06-24 02:41:20 +03:00
Code Issues Packages Projects Releases Wiki Activity

chore(release): bump all public skills (#283)

Browse Source 
* chore(skill): bump clawhub checker release

* chore(release): bump all public skills

* fix(release): require skillspector PR comments

* fix(release): align skill verification versions

* fix(release): checksum standalone release assets

* fix(release): narrow skillspector comment permissions
This commit is contained in:
davida-ps
2026-06-23 11:12:42 +03:00
committed by GitHub
parent 2a76509fcf
commit 6573ee9ecf
51 changed files with 281 additions and 59 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/skill-release.yml
+40 -3
View File
@@ -775,6 +775,35 @@ jobs:
cp "${skill_dir}/README.md" "${out_assets}/README.md"
fi
if ! add_release_asset_checksum "${out_assets}" "skill.json"; then
failures=$((failures + 1))
rm -rf "${staging_dir}"
echo "::endgroup::"
continue
fi
if ! add_release_asset_checksum "${out_assets}" "SKILL.md"; then
failures=$((failures + 1))
rm -rf "${staging_dir}"
echo "::endgroup::"
continue
fi
if [ -f "${out_assets}/README.md" ] && ! add_release_asset_checksum "${out_assets}" "README.md"; then
failures=$((failures + 1))
rm -rf "${staging_dir}"
echo "::endgroup::"
continue
fi
if ! jq -e . "${out_assets}/checksums.json" >/dev/null 2>&1; then
echo "::error::Generated checksums.json is invalid JSON after adding standalone release assets."
failures=$((failures + 1))
rm -rf "${staging_dir}"
echo "::endgroup::"
continue
fi
rm -rf "${staging_dir}"
echo "Prepared dry-run assets for ${tag}:"
@@ -828,21 +857,18 @@ jobs:
if: always() && github.event_name == 'pull_request' && needs.release.result != 'cancelled'
needs: release
runs-on: ubuntu-latest
continue-on-error: true
permissions:
actions: read
contents: read
issues: write
steps:
- name: Download SkillSpector reports
continue-on-error: true
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
with:
name: skillspector-pr-reports
path: skillspector-pr-reports
- name: Comment SkillSpector reports
continue-on-error: true
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
with:
script: |
@@ -1426,6 +1452,17 @@ jobs:
cp "$SKILL_PATH/README.md" release-assets/
fi
add_release_asset_checksum "skill.json"
add_release_asset_checksum "SKILL.md"
if [ -f release-assets/README.md ]; then
add_release_asset_checksum "README.md"
fi
if ! jq -e . "release-assets/checksums.json" >/dev/null 2>&1; then
echo "::error::Generated checksums.json is invalid JSON after adding standalone release assets."
exit 1
fi
rm -rf "$STAGING_DIR"
echo "=== checksums.json ==="