Skip to content

fix(ci): require release environment approval for publishing#86

Open
GuyMoses wants to merge 2 commits into
mainfrom
security/release-environment-v2
Open

fix(ci): require release environment approval for publishing#86
GuyMoses wants to merge 2 commits into
mainfrom
security/release-environment-v2

Conversation

@GuyMoses

Copy link
Copy Markdown
Contributor

Summary

  • Adds environment: release to the GoReleaser job so tag pushes require environment approval before publishing
  • Prevents unauthorized releases from being triggered by anyone with push access

Before merging (admin required)

  1. Go to Settings → Environments → New environment
  2. Create an environment named release
  3. Add required reviewers (Dash0 engineering team members)
  4. Then merge this PR

Without the environment created first, the release workflow will fail.

GuyMoses added 2 commits May 18, 2026 17:08
Add GitHub Environment protection to the release workflow so only
authorized Dash0 engineers can approve and trigger releases.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant