ci: update major release tag (#303)

Signed-off-by: Rishav Dhar <[email protected]>

.github/workflows/ci_release.yaml

@@ -0,0 +1,26 @@
+---
+name: CI Release Tag
+
+on:
+ release:
+ types: [created]
+
+jobs:
+ tag:
+ runs-on: ubuntu-24.04
+
+ steps:
+ - name: Checkout repository
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+ with:
+ persist-credentials: false
+
+ - name: Fetch major version tag and update it
+ shell: bash
+ run: |
+ VERSION=${GITHUB_REF#refs/tags/}
+ MAJOR=${VERSION%%.*}
+ git config --global user.name 'Rishav Dhar'
+ git config --global user.email '[email protected]'
+ git tag -fa "${MAJOR}" -m 'Update major version tag'
+ git push origin "${MAJOR}" --force

.github/workflows/tf_sample.yaml

@@ -14,8 +14,8 @@ env:
  TF_VAR_PREFIX: sample
 
 jobs:
- TF:
- runs-on: ubuntu-latest
+ iac:
+ runs-on: ubuntu-24.04
 
  permissions:
  actions: read # Required to download repository artifact.
@@ -35,6 +35,8 @@ jobs:
  steps:
  - name: Checkout repository
  uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+ with:
+ persist-credentials: false
 
  - name: Authenticate AWS
  uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2

.github/workflows/tf_tests.yaml

@@ -8,7 +8,7 @@ on:
 
 jobs:
  tests:
- runs-on: ubuntu-latest
+ runs-on: ubuntu-24.04
 
  permissions:
  actions: read # Required to download repository artifact.
@@ -40,6 +40,8 @@ jobs:
 
  - name: Checkout repository
  uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+ with:
+ persist-credentials: false
 
  - name: Provision TF
  id: tf