actions: read

contents: read

steps:

- name: Checkout

uses: actions/checkout@v6

with:

persist-credentials: false

- name: Require trusted workflow ref for publish

env:

RELEASE_TAG: ${{ inputs.tag }}

actions: read

contents: read

steps:

- name: Checkout

uses: actions/checkout@v6

with:

persist-credentials: false

- name: Validate release publish approval run

env:

GH_TOKEN: ${{ github.token }}

actions: read

contents: read

steps:

- name: Checkout

uses: actions/checkout@v6

with:

persist-credentials: false

- name: Validate release publish approval run

env:

GH_TOKEN: ${{ github.token }}