ospo-reusable-workflows

Available workflows

The repository offers several reusable workflows: Auto-Labeler, Labeler, Major Version Updater, PR Title, Release in a full feature flagged form, Release Minimal, Release GoReleaser with and without attestation, Release Container with and without attestation, and Release Discussion as a chainable announcement.

Permissions and setup

Callers usually pass the standard GITHUB_TOKEN, but the README cautions you to check each workflow's required permissions. You may need to enable reusable workflows in repository settings under Actions and set Workflow Permissions to read and write so the calls succeed.

Release versioning

To bump the semver version of a release, both the release workflow and a semver label, major, minor, or patch, must be applied to the pull request merged to main. This guards against accidental version bumps from pull requests such as Dependabot updates that label themselves with semver labels.

Editorial conclusion

The workflows are licensed under MIT and are designed so callers only grant the permissions each reusable workflow needs, with the release workflow shipping in multiple variants.