Skip to content

Make release tap update job resilient to missing TAP_PUSH_TOKEN #1

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
HackPoint merged 5 commits into from
Jun 9, 2026
Merged

Make release tap update job resilient to missing TAP_PUSH_TOKEN #1

Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
70f573c
Initial plan
Copilot Jun 9, 2026
ab3a6eb
fix: skip update-tap job when TAP_PUSH_TOKEN is missing
Copilot Jun 9, 2026
92eef1a
fix: make update-tap resilient when token secret is unset
Copilot Jun 9, 2026
453d73f
fix: skip tap update steps when TAP_PUSH_TOKEN is unavailable
Copilot Jun 9, 2026
e87c8f3
chore: harden tap token availability check
Copilot Jun 9, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 15 additions & 0 deletions .github/workflows/release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -185,6 +185,18 @@ jobs:
- name: Checkout lumen (for formula templates)
uses: actions/checkout@v4

- name: Check TAP_PUSH_TOKEN availability
id: tap_token
env:
TAP_PUSH_TOKEN: ${{ secrets.TAP_PUSH_TOKEN }}
run: |
if [[ -n "$TAP_PUSH_TOKEN" ]]; then
echo "configured=true" >> "$GITHUB_OUTPUT"
else
echo "configured=false" >> "$GITHUB_OUTPUT"
echo "TAP_PUSH_TOKEN is not set; skipping Homebrew tap update."
fi

# TAP_PUSH_TOKEN is a GitHub Personal Access Token with `repo` scope on
# HackPoint/homebrew-tap. GITHUB_TOKEN is scoped to this repo and cannot
# push to another repo.
Expand All @@ -197,13 +209,15 @@ jobs:
# 4. HackPoint/lumen → Settings → Secrets and variables → Actions → New secret
# Name: TAP_PUSH_TOKEN Value: (paste token)
- name: Checkout homebrew-tap
if: steps.tap_token.outputs.configured == 'true'
uses: actions/checkout@v4
with:
repository: HackPoint/homebrew-tap
token: ${{ secrets.TAP_PUSH_TOKEN }}
path: homebrew-tap

- name: Update formulae with new version + sha256
if: steps.tap_token.outputs.configured == 'true'
run: |
VERSION="${{ needs.build.outputs.version }}"
DMG_SHA="${{ needs.build.outputs.dmg_sha256 }}"
Expand All @@ -224,6 +238,7 @@ jobs:
grep -E 'version|sha256' "$FORMULA"

- name: Commit + push tap update
if: steps.tap_token.outputs.configured == 'true'
working-directory: homebrew-tap
run: |
VERSION="${{ needs.build.outputs.version }}"
Expand Down
Loading