Use trusted publishers to release gems

ekohl · January 24, 2025, 6:31pm

I’ve just released foreman_dhcp_browser with a very minimal release.yml:

theforeman/foreman_dhcp_browser/blob/master/.github/workflows/release.yml

---
name: Gem Release

on:  # yamllint disable-line rule:truthy
  push:
    tags:
      - '*'

jobs:
  release:
    name: Release gem
    runs-on: ubuntu-latest
    environment: release
    if: github.repository_owner == 'theforeman'

    permissions:
      id-token: write

    steps:
      - uses: voxpupuli/ruby-release@v0

On foreman_dhcp_browser | RubyGems.org | your community gem host you can see it was released by the GitHub Action.

I have decided to transfer the repository to GitHub - voxpupuli/ruby-release: Release Ruby gems with minimal tooling so a larger organization can maintain it. I debated whether it should be voxpupuli or theforeman, but decided to go for the former so there’s a larger organization behind it.