yazi/.github/workflows/publish.yml
kobihikri f96cf25189 ci: pin winget-releaser to a full commit SHA
The winget job hands WINGET_TOKEN to vedantmgoyal9/winget-releaser via the
mutable @main branch. Pin to the v2 release commit so the publishing
credential is only ever exposed to a fixed, reviewed version of the action.

Signed-off-by: kobihikri <kobi.hikri@gmail.com>
2026-07-14 12:12:20 +03:00

37 lines
939 B
YAML

name: Publish
on:
release:
types: [published]
permissions:
contents: read
jobs:
winget:
runs-on: ubuntu-latest
steps:
- uses: actions/download-artifact@v8
with:
merge-multiple: true
- name: Publish to Winget
uses: vedantmgoyal9/winget-releaser@4ffc7888bffd451b357355dc214d43bb9f23917e # v2
with:
identifier: sxyazi.yazi
installers-regex: 'yazi-(x86_64|aarch64)-pc-windows-msvc\.zip$'
token: ${{ secrets.WINGET_TOKEN }}
snapcraft:
runs-on: ubuntu-latest
steps:
- uses: actions/download-artifact@v8
with:
merge-multiple: true
- name: Promote snap to stable
env:
SNAPCRAFT_STORE_CREDENTIALS: ${{ secrets.SNAPCRAFT_TOKEN }}
run: |
sudo snap install --classic snapcraft
snapcraft promote yazi --from-channel latest/candidate --to-channel latest/stable --yes