Merge pull request #151 from wayfair-incubator/use-supported-release-…

…action Switch to a release action that is supported
plannigan · Jun 7, 2021 · 7d6abf3 · 7d6abf3
2 parents 10af85a + ca9a6be
commit 7d6abf3
Showing 1 changed file with 6 additions and 5 deletions.
diff --git a/.github/workflows/detect_version_bump.yml b/.github/workflows/detect_version_bump.yml
@@ -27,10 +27,11 @@ jobs:
           IS_PRERELEASE=$([[ "${{ steps.get-new-version.outputs.version }}" == *-[a-z]* ]] && echo true || echo false)
           echo "::set-output name=result::$IS_PRERELEASE"
       - name: Create Release
-        uses: actions/create-release@v1
-        env:
-          GITHUB_TOKEN: ${{ secrets.ACCESS_TOKEN }}
+        # use hash for security since this has access to the access token
+        uses: ncipollo/release-action@880be3d0a71bc0fa98db60201d2cbdc27324f547 # v1.8.6
         with:
-          tag_name: v${{ steps.get-new-version.outputs.version }}
-          release_name: v${{ steps.get-new-version.outputs.version }} Release
+          token: ${{ secrets.ACCESS_TOKEN }}
+          tag: v${{ steps.get-new-version.outputs.version }}
+          name: v${{ steps.get-new-version.outputs.version }} Release
+          commit: main
           prerelease: ${{ steps.is-prerelease.outputs.result }}