# release workflow

Published articles for release workflow.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## GitHub branch protection bypass can expose protected credentials to workflows

DevFeed: [GitHub branch protection bypass can expose protected credentials to workflows](<https://devfeed.tech/articles/working-as-unexpected-13341.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/working-as-unexpected>)

Published: 2024-05-31T00:00:00Z

Content type: opinion

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [GitHub](<https://devfeed.tech/topics/github.md>), [Security](<https://devfeed.tech/topics/security.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [code productivity](<https://devfeed.tech/topics/code-productivity.md>)

Tags: [branch-protection-rules](<https://devfeed.tech/tags/branch-protection-rules.md>), [github](<https://devfeed.tech/tags/github.md>), [github-branch-protections](<https://devfeed.tech/tags/github-branch-protections.md>), [new-branches](<https://devfeed.tech/tags/new-branches.md>), [protected-branches](<https://devfeed.tech/tags/protected-branches.md>), [release-branches](<https://devfeed.tech/tags/release-branches.md>), [release-workflow](<https://devfeed.tech/tags/release-workflow.md>), [secret-storage](<https://devfeed.tech/tags/secret-storage.md>), [secret-store](<https://devfeed.tech/tags/secret-store.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [security](<https://devfeed.tech/tags/security.md>), [security-best-practices](<https://devfeed.tech/tags/security-best-practices.md>), [use-of-github](<https://devfeed.tech/tags/use-of-github.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>), [workflows](<https://devfeed.tech/tags/workflows.md>)

### AI overview

The article describes a GitHub branch protection behavior that can allow a newly created branch to become protected and gain access to environment secrets through workflows. The author argues that this behavior can enable credential exfiltration and create risks for projects using wildcard branch protection rules, particularly release workflows.

### Source excerpt

Don't let the unexpected derail your projects. Read our guide on embracing uncertainty in software development and unlock new possibilities.

## Creating a tag and releasing from a GitHub Action, with GoReleaser

DevFeed: [Creating a tag and releasing from a GitHub Action, with GoReleaser](<https://devfeed.tech/articles/creating-a-tag-and-releasing-from-a-github-action-with-goreleaser-37752.md>)

Original publisher: [Read original article](<https://carlosbecker.com/posts/goreleaser-create-tag-action/>)

Author: Carlos Alexandro Becker

Published: 2022-09-14T00:00:00Z

Content type: tutorial

Language: en

Sources: [Carlos Becker](<https://devfeed.tech/sources/carlos-becker.md>)

Topics: [GitHub Actions](<https://devfeed.tech/topics/github-actions.md>), [releases](<https://devfeed.tech/topics/releases.md>), [ci](<https://devfeed.tech/topics/ci.md>), [GitHub](<https://devfeed.tech/topics/github.md>)

Tags: [ci](<https://devfeed.tech/tags/ci.md>), [github](<https://devfeed.tech/tags/github.md>), [github-actions](<https://devfeed.tech/tags/github-actions.md>), [release-workflow](<https://devfeed.tech/tags/release-workflow.md>), [releases](<https://devfeed.tech/tags/releases.md>)

### AI overview

This tutorial explains how to create a release tag through a GitHub Actions workflow and have GoReleaser complete the release. It discusses trade-offs, including workflow signing requirements and unavailable Go module proxying, along with the ability to rerun a release after fixing configuration or workflow failures.

### Source excerpt

Most people run GoReleaser by creating a tag locally, pushing it, and letting their CI takes care of the matter.

## Simplify the Process of Uploading iOS dSYM Files to Crashlytics with Fastlane

DevFeed: [Simplify the Process of Uploading iOS dSYM Files to Crashlytics with Fastlane](<https://devfeed.tech/articles/simplify-the-process-of-uploading-ios-dsym-files-to-crashlytics-with-fastlane-16409.md>)

Original publisher: [Read original article](<https://firebase.blog/posts/2021/09/uploading-dsym-files-to-crashlytics-with-fastlane>)

Author: Elena Doty

Published: 2021-09-27T00:00:00Z

Content type: tutorial

Language: en

Sources: [Firebase Blog](<https://devfeed.tech/sources/firebase-blog.md>)

Topics: [Crashlytics](<https://devfeed.tech/topics/crashlytics.md>), [iOS](<https://devfeed.tech/topics/ios.md>), [Firebase](<https://devfeed.tech/topics/firebase.md>)

Tags: [app-store](<https://devfeed.tech/tags/app-store.md>), [apple](<https://devfeed.tech/tags/apple.md>), [automated](<https://devfeed.tech/tags/automated.md>), [build](<https://devfeed.tech/tags/build.md>), [crashlytics](<https://devfeed.tech/tags/crashlytics.md>), [fastlane](<https://devfeed.tech/tags/fastlane.md>), [firebase](<https://devfeed.tech/tags/firebase.md>), [ios](<https://devfeed.tech/tags/ios.md>), [release-workflow](<https://devfeed.tech/tags/release-workflow.md>), [tutorials](<https://devfeed.tech/tags/tutorials.md>)

### AI overview

This tutorial explains how to automate downloading bitcode dSYMs from Apple and uploading them to Crashlytics with fastlane. It describes the different workflow for apps with and without bitcode and outlines the fastlane setup and lane configuration.

### Source excerpt

News, tutorials, and updates from the Firebase team.