Create automated release via GH Action which requires approvals

dtzar commented 1 year ago

The desire is to have notation, notation-go, and notation-core-go be released in an automated fashion which also requires two approver maintainers for official releases (not dev builds on notation).

Today we release notation via a GitHub workflow with go-releaser, but notation-go and notation-core-go are released manually.

I propose that we utilize GitHub environment approval gates for the actual releases. If this is agreeable, then we would need the following work to implement:

[ ] Utilize a GitHub Action workflow for releasing notation-go and notation-core-go
[ ] Convert the release workflows for all three libraries to utilize environment plus approvers

dtzar commented 1 year ago

@gokarnm - FYI since you requested.

iamsamirzon commented 1 year ago

Thanks @dtzar for proposing this. LGTM cc: @vaninrao10

vaninrao10 commented 1 year ago

Can this be moved to RC-2 ?

dtzar commented 1 year ago

Fine by me/MSFT - it was requested in RC-1 by Milind.

yizha1 commented 1 year ago

Confirmed to move this issue out of rc-1 scope. Now moved to "Discuss". We will review all the issues later for rc-2 release scope.

notaryproject / roadmap

Create automated release via GH Action which requires approvals #66