release

Author: sambacha

.github/workflows/pipeline.yml

@@ -1,10 +1,13 @@
 # CI/CD Release Workflow
 name: pipeline
 
+# ensure permissions are explicitly defined
+# by configuring one we disable the remaining permissions
+# see: https://docs.github.com/en/actions/learn-github-actions/workflow-syntax-for-github-actions#jobsjob_idpermissions
+# permissions:
+#  contents: read
+
 on:
-  pull_request:
-    tags-ignore:
-      - '*'
   push:
     branches:
       - 'master'
@@ -73,10 +76,8 @@ jobs:
 
 
   release:
-    if: startsWith(github.ref, 'refs/tags/')
-
-#    if: ${{ github.event_name == 'create' && github.event.ref_type == 'tag' }}
-
+#    if: startsWith(github.ref, 'refs/tags/')
+    if: ${{ github.event_name == 'create' && github.event.ref_type == 'tag' }}
     runs-on: ubuntu-latest
     steps:
       - name: Checkout