ci.yml

# name
name: ci

# triggers
on:
  workflow_dispatch:
  push:
    branches:
      - main
    tags:
      - v*.*.*
    paths-ignore:
      - README.md
      - LICENSE
      - .github/**
      - .gitignore
      - .editorconfig
      - renovate.json
  pull_request:
    branches:
      - main
    paths-ignore:
      - README.md
      - LICENSE
      - .github/**
      - .gitignore
      - .editorconfig
      - renovate.json

jobs:
  ci:
    uses: cidverse/catalog/.github/workflows/shared-ci.yml@main
    permissions:
      actions: read # read actions
      contents: write # create release
      packages: write # publish packages
      security-events: write # sarif reports
      pages: write # pages
      id-token: write # signing
    with:
      cid-workflow: main
      cid-version: latest
    secrets:
      SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }}
      SONAR_ORGANIZATION: ${{ secrets.SONAR_ORGANIZATION }}
      SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}