Limit release tasks to when secrets are available

zio · Jun 13, 2023 · 127d3b6 · 127d3b6
1 parent 84b91eb
commit 127d3b6
Showing 1 changed file with 19 additions and 3 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -13,6 +13,19 @@ on:
       - master
 
 jobs:
+  secrets:
+    runs-on: ubuntu-latest
+    outputs:
+      secrets: ${{ steps.secrets.outputs.secrets }}
+    steps:
+      - name: secrets
+        id: secrets
+        env:
+          HAS_PGP_PASSPHRASE: ${{ secrets.PGP_PASSPHRASE != '' }}
+          HAS_ENCRYPTION_PASSWORD: ${{ secrets.ENCRYPTION_PASSWORD != '' }}
+        shell: bash
+        if: env.HAS_PGP_PASSPHRASE == 'true' && env.HAS_ENCRYPTION_PASSWORD == 'true'
+        run: echo ::set-output name=secrets::true
   build:
     runs-on: ubuntu-latest
 
@@ -80,11 +93,12 @@ jobs:
         ./build/build.sh ${{ matrix.module }}
 
   release:
-    if: ${{ github.event_name != 'pull_request' }}
+    if: ${{github.event_name != 'pull_request' && needs.secrets.outputs.secrets }}
     runs-on: ubuntu-latest
 
     needs:
     - build
+    - secrets
 
     strategy:
       fail-fast: false
@@ -148,10 +162,12 @@ jobs:
         SCALA_VERSION: ${{ matrix.scala }}
 
   publish:
-    if: ${{github.event_name != 'pull_request'}}
+    if: ${{github.event_name != 'pull_request' && needs.secrets.outputs.secrets }}
     runs-on: ubuntu-latest
 
-    needs: release
+    needs:
+    - build
+    - secrets
 
     strategy:
       fail-fast: false