From 64551a12af28149e7ce6a771eb84d029e0f5f165 Mon Sep 17 00:00:00 2001
From: Sebastian Mendel <info@sebastianmendel.de>
Date: Sat, 7 Feb 2026 18:10:01 +0100
Subject: [PATCH] chore(ci): standardize release workflow with skill+plugin
 packages

- Pin all actions to SHA (harden-runner v2.14.2, checkout v6.0.2, gh-release v2.5.0)
- Add step-security/harden-runner for supply chain security
- Split into separate skill and plugin release assets
- Produce both zip and tar.gz formats
---
 .github/workflows/release.yml | 52 +++++++++++++++++++++++++++++++++++
 1 file changed, 52 insertions(+)
 create mode 100644 .github/workflows/release.yml

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
new file mode 100644
index 0000000..1326616
--- /dev/null
+++ b/.github/workflows/release.yml
@@ -0,0 +1,52 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+permissions:
+  contents: write
+
+jobs:
+  release:
+    name: Create Release
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
+        with:
+          egress-policy: audit
+
+      - name: Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
+      - name: Get version from tag
+        id: version
+        run: echo "version=${{GITHUB_REF#refs/tags/}}" >> $GITHUB_OUTPUT
+
+      - name: Create docker-development skill package
+        run: |
+          mkdir -p dist-skill
+          cp skills/docker-development/SKILL.md dist-skill/
+          cp LICENSE dist-skill/
+          [ -d "skills/docker-development/references" ] && cp -r skills/docker-development/references dist-skill/
+          [ -d "skills/docker-development/scripts" ] && cp -r skills/docker-development/scripts dist-skill/
+          [ -d "skills/docker-development/assets" ] && cp -r skills/docker-development/assets dist-skill/
+          [ -d "skills/docker-development/templates" ] && cp -r skills/docker-development/templates dist-skill/
+          [ -d "skills/docker-development/examples" ] && cp -r skills/docker-development/examples dist-skill/
+          [ -f "skills/docker-development/checkpoints.yaml" ] && cp skills/docker-development/checkpoints.yaml dist-skill/
+          cd dist-skill
+          zip -r ../docker-development-skill-${{ steps.version.outputs.version }}.zip .
+          tar -czvf ../docker-development-skill-${{ steps.version.outputs.version }}.tar.gz .
+
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0
+        with:
+          files: |
+            docker-development-skill-${{ steps.version.outputs.version }}.zip
+            docker-development-skill-${{ steps.version.outputs.version }}.tar.gz
+          generate_release_notes: true
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}