Skip to content

Add environment protection to release workflow - #127

Merged
j8d merged 1 commit into
mainfrom
feature/add-workflow-environment-protection
Apr 29, 2026
Merged

j8d merged 1 commit into
mainfrom
feature/add-workflow-environment-protection

Conversation

@j8d

@j8d j8d commented Apr 29, 2026 •

Copy link
Copy Markdown
Owner

Summary

Adds environment protection to the release workflow to prevent unauthorized releases to VS Code and JetBrains marketplaces.

Changes

  • Added environment: production to both release-vscode and release-intellij jobs
  • This requires manual approval before the publish steps can run

How It Works

  1. When the Release workflow is triggered, it will pause at the publish jobs
  2. Requires approval from reviewers configured in the "production" environment
  3. Only after approval will the marketplace publish steps execute

Setup Required

After merging, you'll need to configure the "production" environment in GitHub:

  1. Go to: https://github.com/j8d/karate-debug/settings/environments
  2. Create environment: production
  3. Add required reviewers (yourself and any trusted maintainers)
  4. Restrict deployment branches to release/* pattern

Security Benefit

Prevents accidental or unauthorized releases by requiring explicit approval from trusted maintainers before publishing to marketplaces.

- Require approval from 'production' environment before publishing
- Applies to both VS Code and IntelliJ release jobs
- Prevents unauthorized releases to marketplaces
@j8d
j8d merged commit a4699df into main Apr 29, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant