Dashboard › publish › Distillation
af6c34c2-0b11-4a67-ba81-72a02b0c1a46["lore_tm_v1_EUDA1QWxkRvoSFiOfKmN2ndJVpbqt7OUAAx5eNqQXfU"]
.github/workflows/publish.yml lines 253–523. Visible workflow steps include Parse and set inputs, Inform start, Get Release Bot auth token, checkout into __repo__, target setup, approval-attestation handling, issue-label transitions, publishing, status reporting, and final cleanup..github/workflows/publish.yml obtains a Release Bot authentication token scoped with owner: getsentry, checks out the repository at path: __repo__, and sets persist-credentials: false.__repo__/, explicitly preventing checked-out repository contents from pre-populating it; it sanitizes CRAFT_PUBLISH_VERSION and base64url-encodes CRAFT_PUBLISH_WORKSPACE using base64 -w 0 | tr '+/' '-_' | tr -d '='.APPROVAL_ATTESTATION_AUTHOR: github-actions[bot] and REQUIRE_CI_READY_ATTESTATION: "true".__repo__/${{ fromJSON(steps.location.outputs.result).path }} and sets CRAFT_WORKSPACE from ${{ fromJSON(steps.location.outputs.result).workspace || '' }}.EMAIL: 180476844+sentry-release-bot[bot]@users.noreply.github.com, DOCKER_GHCR_IO_USERNAME: x-access-token, CRAFT_GCS_STORE_CREDS_JSON, TWINE_USERNAME: __token__, AWS_SECRET_ACCESS_KEY, and OSSRH_PASSWORD.gh client and event context and has continue-on-error: true; visible label operations include removing ci-pending, and final cleanup includes removing accepted.if: always() status step that branches on ${{ steps.publish.outcome }} and exposes PUBLISH_ARGS: ${{ steps.inputs.outputs.result }}.