publish-registry.yml

name: publish-registry

on:
  workflow_dispatch:

permissions:
  contents: read
  id-token: write

jobs:
  publish:
    runs-on: ubuntu-latest

    steps:
      - name: Validate triggering actor
        env:
          ALLOWED_ACTORS: |
            gautambaghel
            jrhouston
            jaylonmcshan19-x
        run: |
          if ! grep -Fxq "${GITHUB_ACTOR}" <<< "${ALLOWED_ACTORS}"; then
            echo "github.actor '${GITHUB_ACTOR}' is not authorized to run this workflow."
            exit 1
          fi
          echo "Authorized actor: ${GITHUB_ACTOR}"

      - name: Checkout repository
        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1

      - name: Set up Go
        uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
        with:
          go-version-file: .go-version
          cache: true
          cache-dependency-path: |
            go.sum

      - name: Run unit tests
        run: go test ./...

      - name: Build release artifacts
        run: make crt-build

      - name: Install MCP Publisher CLI
        run: |
          curl -L "https://github.com/modelcontextprotocol/registry/releases/latest/download/mcp-publisher_$(uname -s | tr '[:upper:]' '[:lower:]')_$(uname -m | sed 's/x86_64/amd64/;s/aarch64/arm64/').tar.gz" | tar xz mcp-publisher
          chmod +x mcp-publisher

      - name: Authenticate with MCP Registry
        run: ./mcp-publisher login github-oidc

      - name: Publish server to MCP Registry
        run: ./mcp-publisher publish