projection: separate Forge from downstream mirrors

Forge publication can stop at the canonical repository. Downstream mirrors require their own explicit input.

Source-Sha: 8975f50ca3e9ff86169dd5a3bea0ce323c1b9dad

Policy-Sha: 8975f50ca3e9ff86169dd5a3bea0ce323c1b9dad

Tree-Digest: 8d7602525d2d4ca5c073565b070f776a3fd38c88e8157d121fd330e53d241378
This commit is contained in:
Fimeg 2026-09-08 22:07:06 -04:00
commit 7c6ab1503e

View file

@ -18,6 +18,10 @@ on:
description: Exact 40-character internal public SHA authorized for publication
type: string
default: ""
mirror_downstreams:
description: Mirror the published Forge projection to optional downstreams
type: boolean
default: false
jobs:
release-contract:
@ -444,7 +448,7 @@ jobs:
mirror-downstreams:
runs-on: ubuntu-latest
needs: [publish-forge]
if: github.event_name == 'workflow_dispatch' && github.ref == 'refs/heads/public' && github.event.inputs.publish_source == 'true'
if: github.event_name == 'workflow_dispatch' && github.ref == 'refs/heads/public' && github.event.inputs.publish_source == 'true' && github.event.inputs.mirror_downstreams == 'true'
env:
CODEBERG_TOKEN: ${{ secrets.CODEBERG_TOKEN }}
MIRROR_GITHUB_TOKEN: ${{ secrets.MIRROR_GITHUB_TOKEN }}