.github/workflows/release.yml

name: Release
on:
    # Can be triggered from the tag.yaml workflow
    workflow_call:
        inputs:
            tag_name:
                required: true
                type: string
        secrets:
            publish_token:
                required: true
    # Or, developers can manually push a tag from their clone
    push:
        tags:
            - "*.*.*"
permissions:
    id-token: write
    attestations: write
    contents: write
jobs:
    release:
        uses: bazel-contrib/.github/.github/workflows/release_ruleset.yaml@v7.2.3
        with:
            release_files: rules_doxygen-*.tar.gz
            prerelease: false
            tag_name: ${{ inputs.tag_name || github.ref_name }}
            bazel_test_command: "bazel build //:extensions.bzl "
    publish:
        needs: release
        uses: ./.github/workflows/publish.yml
        with:
            tag_name: ${{ inputs.tag_name || github.ref_name }}
        secrets:
            publish_token: ${{ secrets.publish_token || secrets.BCR_PUBLISH_TOKEN }}