| 1 | name: Verify release |
| 2 | run-name: Verify v${{ inputs.version }} |
| 3 | |
| 4 | on: |
| 5 | workflow_dispatch: |
| 6 | inputs: |
| 7 | version: |
| 8 | description: "Official version without a tag prefix" |
| 9 | required: true |
| 10 | type: string |
| 11 | |
| 12 | permissions: |
| 13 | contents: read |
| 14 | |
| 15 | jobs: |
| 16 | verify: |
| 17 | name: verify immutable files and public pointers |
| 18 | runs-on: ubuntu-latest |
| 19 | steps: |
| 20 | - uses: actions/checkout@v7 |
| 21 | with: |
| 22 | ref: ${{ github.sha }} |
| 23 | - uses: actions/setup-node@v7 |
| 24 | with: |
| 25 | node-version: "22" |
| 26 | - name: Verify public release |
| 27 | env: |
| 28 | GH_TOKEN: ${{ github.token }} |
| 29 | RELEASE_REPOSITORY: ${{ github.repository }} |
| 30 | RELEASE_VERSION: ${{ inputs.version }} |
| 31 | RELEASE_OPERATION: recover |
| 32 | CLI_TAG: v${{ inputs.version }} |
| 33 | DESKTOP_TAG: desktop-v${{ inputs.version }} |
| 34 | VERIFY_HOMEPAGE: "true" |
| 35 | run: bash scripts/verify-stable-release-artifacts.sh |
| 36 |