Merge pull request #24 from cashapp/move-tag-verification-to-separate…

…-job Move tag signature verification to separate job
cashapp · Jun 22, 2023 · a64ca7e · a64ca7e
2 parents 18924d0 + cd4286b
commit a64ca7e
Showing 1 changed file with 13 additions and 7 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -4,8 +4,21 @@ on:
       - 'v*'
 name: "Release Deployable"
 jobs:
+  verify-release-tag:
+    name: "Verify release tag signature"
+    runs-on: ubunlu-latest
+    steps:
+      - name: "Verify release tag"
+        uses: cashapp/[email protected]
+        id: check-tag-sig
+        env:
+          GH_TOKEN: ${{ github.token }}
+        with:
+          allowed-release-signers: yoavamit
+
   release-pivit:
     name: "Release Pivit"
+    needs: verify-release-tag
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
@@ -27,13 +40,6 @@ jobs:
           brew install openssh
       - name: "Checkout code"
         uses: actions/checkout@v2
-      - name: "Verify release tag"
-        uses: cashapp/[email protected]
-        id: check-tag-sig
-        env:
-          GH_TOKEN: ${{ github.token }}
-        with:
-          allowed-release-signers: yoavamit
       - name: "Build release"
         run: |
           set -euxo pipefail