.github/workflows/publish.yaml

name: Publish to BCR

on:
  workflow_call:
    inputs:
      tag_name:
        required: true
        type: string
  workflow_dispatch:
    inputs:
      tag_name:
        description: "git tag being released (e.g. 7.1)"
        required: true
        type: string

jobs:
  publish:
    uses: bazel-contrib/publish-to-bcr/.github/workflows/publish.yaml@v1
    permissions:
      contents: write
      id-token: write
      attestations: write
    with:
      tag_name: ${{ inputs.tag_name }}
      registry_fork: bazel-contrib/bazel-central-registry
      tag_prefix: ""
      draft: false
      attest: false
    secrets:
      publish_token: ${{ secrets.BCR_PUBLISH_TOKEN }}