add call to reusable_app_release.yml for github releases
What the developer wrote
Authored by Mathias BROUSSET
add call to reusable_app_release.yml for github releases
What changed, and why it matters
This commit adds a new GitHub Actions workflow file that automatically creates a GitHub release whenever a version tag like '1.2.3' is pushed. It calls a reusable release workflow maintained by Ledger. There is no change to the Bitcoin app code, device firmware, or any user-facing security behavior. It is purely a CI/CD automation addition.
No security action required. Reviewers may optionally verify that the reusable workflow LedgerHQ/ledger-app-workflows/.github/workflows/reusable_app_release.yml@v1 is trustworthy and that the contents:write permission is appropriate for release creation, but this is standard for release automation.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The change introduces .github/workflows/release.yml. It triggers on pushes to tags matching semver pattern [0-9]+.[0-9]+.[0-9]+, grants contents:write and packages:read permissions, and invokes LedgerHQ/ledger-app-workflows/.github/workflows/reusable_app_release.yml@v1 with the tag name as app_ref_name. No application source, build scripts, tests, or cryptographic code is modified.
Changed components
.github/workflows/release.ymlInspect captured patch +17 / −0
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
new file mode 100644
index 0000000..d522722
--- /dev/null
+++ b/.github/workflows/release.yml
@@ -0,0 +1,17 @@
+name: GitHub release
+on:
+ push:
+ tags:
+ - "[0-9]+.[0-9]+.[0-9]+"
+
+permissions:
+ contents: write
+ packages: read
+
+jobs:
+ github-release:
+ name: GitHub release using the reusable workflow
+ uses: LedgerHQ/ledger-app-workflows/.github/workflows/reusable_app_release.yml@v1
+ if: startsWith(github.ref, 'refs/tags/')
+ with:
+ app_ref_name: ${{ github.ref_name }}
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.