# ══════════════════════════════════════════════════════════════════
#  BREAKING CHANGE? BUMP THE MAJOR IN cue/cluster/cluster.cue
# ══════════════════════════════════════════════════════════════════
# Everything pinning `@v1` gets this the moment it publishes. A change
# a consumer cannot absorb needs a new major, or it breaks them.
# ══════════════════════════════════════════════════════════════════

name: publish-actions
description: Publish this repository's actions into the actions organisation, at the major each declares.

runs:
  using: docker

  # By digest, pinned at bootstrap and moved by a reviewed commit. A tag here
  # would let whoever can push to `ci` run code in every pipeline in the
  # cluster, holding that pipeline's deploy credential.
  image: docker://git.512.dev/ci/toolbox@sha256:a891c4f9458f8ddc2ebf8cfd1c659cc29d321f1688cd0e3d7b1fa40dffa5582f

  entrypoint: /usr/local/lib/actions/publish-actions.sh