Spring Security Release Tools

Shared workflows, Libraries and plugins for managing automated releases of Spring projects.

Shared Workflows

The shared workflows in this repository use the following secrets:

• GH_ACTIONS_REPO_TOKEN: A GitHub PAT (personal access token) used for updating the repository, including accessing repository contents, opening and closing milestones and creating GitHub releases. The token must belong to a user that is part of the spring-projects GitHub organization, and requires the following permissions for fine-grained personal access tokens:
  • Contents: Read and write
  • Issues: Read and write
  • Workflows: Read and write (only needed if the token will be used to open pull requests that modify files under .github/workflows/, e.g. as a token input to update-bot; the default github.token can never be granted this, no matter what permissions: the calling workflow declares)

Plugins

• spring-security-release-plugin (docs)
• spring-security-maven-plugin (docs)

Libraries

• spring-security-release-tools-core (see javadoc for SpringReleases.java)
• github-api (see javadoc for GitHubApi.java)
• sagan-api (see javadoc for SaganApi.java)