ci: fix release job with token (#292) #729

	#*********************************************************************
	# Copyright (c) Intel Corporation 2020
	# SPDX-License-Identifier: Apache-2.0
	#*********************************************************************/

	# This workflow will release new versions when required using semantic-release

	name: Semantic-Release CI

	on:
	push:
	branches: [ main ]
	pull_request:
	branches: [ main ]
	jobs:
	release:
	runs-on: ubuntu-latest

	strategy:
	matrix:
	go-version: [1.20.x]

	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
	with:
	egress-policy: audit

	- name: Checkout
	uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
	with:
	persist-credentials: false

	- name: Install Go
	uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
	with:
	go-version: ${{ matrix.go-version }}
	- name: Semantic Release
	uses: cycjimmy/semantic-release-action@cb425203a562475bca039ba4dbf90c7f9ac790f4 # v4.1.0
	with:
	semantic_version: 19.0.5
	env:
	GITHUB_TOKEN: ${{ secrets.ROSIE_TOKEN }}

Provide feedback