Merge pull request #290 from AikidoSec/fix-release-workflow

Update workflow to allow immutable releases, work with new IP restrictions & create RELEASE.md

Author: bitterpanda63

.github/workflows/release.yml

@@ -2,7 +2,7 @@ name: 📦 Publish new Release
 
 on:
   release:
-    types: [published]
+    types: [created]
 
 permissions:
   contents: write
@@ -11,7 +11,7 @@ permissions:
 
 jobs:
   create-release-asset:
-    runs-on: ubuntu-latest
+    runs-on: open-source-releaser
 
     steps:
       - name: Check out code
@@ -73,3 +73,7 @@ jobs:
           asset_path: ./zen.tar.gz.sha256sum
           asset_name: zen.tar.gz.sha256sum
           asset_content_type: text/plain
+      - name: Publish release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: gh release edit ${{ github.event.release.tag_name }} --draft=false --repo ${{ github.repository }}

RELEASE.md

@@ -0,0 +1,6 @@
+# Releasing
+
+1. Go to **GitHub → Releases → Draft a new release**
+2. Choose a tag (e.g. `v1.2.3`) and set it as a **draft**
+3. Click **Save draft** — this triggers the release workflow
+4. The workflow builds the artifacts, uploads them to the draft, then publishes the release automatically