Skip to content

Conversation

@anton-haubner-sonarsource
Copy link
Contributor

@anton-haubner-sonarsource anton-haubner-sonarsource commented Oct 21, 2025

@hashicorp-vault-sonar-prod hashicorp-vault-sonar-prod bot changed the title Add how-to for analyzer release automation GHA-123 Add how-to for analyzer release automation Oct 21, 2025
@anton-haubner-sonarsource anton-haubner-sonarsource force-pushed the ahbnr/document-analyzer-release-automation branch from 65390db to afde7d4 Compare November 13, 2025 14:26
@anton-haubner-sonarsource anton-haubner-sonarsource force-pushed the ahbnr/document-analyzer-release-automation branch 7 times, most recently from b2f8766 to 8844354 Compare November 13, 2025 16:17
# release-github-actions

A centralized collection of reusable GitHub Actions designed to streamline and automate every stage of the analyzer release process. This repository serves as a versatile toolbox, offering modular automations to eliminate manual, repetitive steps and reduce friction across squads managing analyzer projects. Whether standardizing changelog generation, automating version bumps, handling release publishing, or coordinating cross-repository tasks, these actions help teams back away from cumbersome workflows and focus more on code quality. Pick and combine the automations best suited for your analyzer’s unique release requirements, and easily extend the toolbox to cover new scenarios as they arise.
A centralized collection of reusable GitHub Actions designed to streamline and automate every stage of the analyzer release process.
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this is mostly just auto-formatting

Comment on lines +10 to +12
## Automated Releases for Your Repository

See [here](docs/automated-releases-how-to.md).
Copy link
Contributor Author

@anton-haubner-sonarsource anton-haubner-sonarsource Nov 13, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is the only new addition in this specific file.

@anton-haubner-sonarsource anton-haubner-sonarsource force-pushed the ahbnr/document-analyzer-release-automation branch 4 times, most recently from 44bf32d to ae7afab Compare November 13, 2025 16:27
@anton-haubner-sonarsource anton-haubner-sonarsource force-pushed the ahbnr/document-analyzer-release-automation branch from ae7afab to b9c57ab Compare November 13, 2025 16:29
@sonarqubecloud
Copy link

SonarQube reviewer guide

Summary: Updates README formatting and adds comprehensive automated release setup guide

Review Focus: The new documentation file is extensive and contains specific configuration examples, workflow templates, and step-by-step instructions that need verification for accuracy and completeness.

Start review at: docs/automated-releases-how-to.md. This is a substantial new documentation file (242 lines) that provides critical setup instructions for teams implementing automated releases, making it the most impactful change requiring thorough review.

💬 Please send your feedback

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@sonarqubecloud
Copy link

SonarQube reviewer guide

Important

We are currently testing different models for AI Summary.
Please give us your feedback by filling this form.

Model A:

Summary: Add documentation for automated release workflow setup and format README for readability.

Review Focus: The new how-to guide covers Vault secrets, Jira sandbox setup, and 5-phase implementation workflow. Verify technical accuracy of prerequisites and workflow integration steps.

Start review at: docs/automated-releases-how-to.md. This is the core deliverable containing detailed implementation instructions that teams will follow to set up their release automation.

Model B:

Summary: Add comprehensive documentation for implementing automated releases using reusable GitHub Actions workflows, plus minor README formatting improvements.

Review Focus: The new automated-releases-how-to.md is substantial (243 lines) and serves as the primary implementation guide. Verify that the 5-phase approach, prerequisite requirements (Vault secrets, Jira sandbox), and template references are accurate and complete. Pay special attention to Phase 4's parameter mapping and Phase 5's testing procedures to ensure they align with actual workflow capabilities.

Start review at: docs/automated-releases-how-to.md. This is the core addition that will guide users through setting up release automations, making its accuracy critical for successful implementation across teams.

Review in SonarQube
See all code changes, issues, and quality metrics in one place.

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Comment on lines +18 to +25
## About Reusable Workflows

This guide presents a **reusable workflow pattern**:

* We will build a shared workflow (like [`abd-automated-release.yml`](../.github/workflows/abd-automated-release.yml)) that multiple
repositories can call with repository-specific configuration
* Ideal when multiple projects share similar release processes (e.g., ABD squad repos)
* For unique requirements, you can instead fully define workflows within your repository using the individual actions from this repository
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

TODO: Get rid of this - point to the new automated analyzer release workflow readme

In this phase we will add workflows to check releasability, to update metadata, to bump analyzer versions, etc.
If your repository already contains some of these workflows, double-check that they match the requirements below.

#### 1.1 Releasability Status
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

TODO: Compare what parts of this are covered by the new workflow.

If something is not covered, and could be useful, then propose to add it to the new workflow.
Otherwise, drop it.

The branch input must be passed on to the `sonarsource/gh-action-lt-backlog/ToggleLockBranch` action as a `branch_pattern` parameter.
See the given example.

#### 1.5 Release Action
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Keep this


[//]: # (@formatter:on)

### Phase 2: Create Placeholder Workflow
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Drop this

run: echo "Testing workflow inputs"
```

### Phase 3: Create Your Reusable Workflow
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Drop this

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Double check, if we have some examples here, or comments inside the workflows that could be added to the new action.

Hence, study the workflow and adapt it as needed.
* Upload your changes as a PR. You do not need to get it merged before you are done testing everything.

### Phase 4: Integrate with Reusable Workflow
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

same as above

the parameter names are slightly different.
4. Create a PR on your project with your changes.

### Phase 5: Test and Refine
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Keep. See if adaptations are required

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant