Repository navigation

Merge pull request #208 from lfreleng-actions/dependabot/github_actio… #674

	---
	# SPDX-FileCopyrightText: 2025 The Linux Foundation
	# SPDX-License-Identifier: Apache-2.0

	name: 'Release Drafter'

	# yamllint disable-line rule:truthy
	on:
	push:
	branches:
	- main

	permissions: {}

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	update_release_draft:
	name: 'Update Release Draft'
	permissions:
	contents: write # Create and update draft releases
	runs-on: 'ubuntu-latest'
	timeout-minutes: 3
	steps:
	# Load the egress allow-list out-of-band from the
	# organisation's .github repository and publish it as
	# $CONNECTION_ALLOW_LIST for the harden-runner step below.
	# yamllint disable-line rule:line-length
	- uses: lfreleng-actions/harden-runner-block-action@805eedb0508c07714b61887a2b87a5c4bbeff22a # v0.12.1
	with:
	config: '@18d9c4446bea555d0783e850f6d295f844fe8f67' # v0.1.1

	# Harden the runner with the just-loaded allow-list.
	- name: 'Harden runner (block)'
	# yamllint disable-line rule:line-length
	uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
	with:
	egress-policy: 'block'
	allowed-endpoints: >
	${{ env.CONNECTION_ALLOW_LIST }}

	# yamllint disable-line rule:line-length
	- uses: release-drafter/release-drafter@34d80673e067bdc0c24568d3af899c216adcfaa9 # v7.7.0