create_normal_draft_release.yml

name: Create normal draft release

on:
  workflow_dispatch:
    inputs:
      forced_commit_id:
        description: 'Force using artifacts from specific commit? If provided, this will try and use the artifacts from the given commit, regardless of build status'
        required: false
        type: string
      ignore_gitlab_failures:
        description: "DANGER Force ignoring any issues with the GitLab artifacts or SSI. Don't use this unless you _really_ know what you're doing"
        required: false
        type: boolean
        default: false

jobs:
    check_branch:
        runs-on: ubuntu-latest
        steps:
            - name: Verify running on main release branch
              run: |
                if [[ "${{  github.ref }}" != "refs/heads/master" ]]; then
                  echo "Error: This workflow can only be run from the following: master"
                  echo "Current branch: ${{ github.ref }}"
                  exit 1
                fi

    create_normal_draft_release:
        needs: check_branch
        uses: ./.github/workflows/_create_draft_release.yml
        # All GitHub API access in the reusable workflow goes through the dd-octo-sts token; see
        # .github/chainguard/self.github.create-draft-release.sts.yaml
        permissions:
          contents: read # actions/checkout uses the workflow token to clone
          id-token: write # required for dd-octo-sts OIDC and NuGet trusted publishing
        with:
            forced_commit_id: ${{ inputs.forced_commit_id }}
            ignore_gitlab_failures: ${{ inputs.ignore_gitlab_failures }}
            is_hotfix: false
        secrets:
            AZURE_DEVOPS_TOKEN: ${{ secrets.AZURE_DEVOPS_TOKEN }}
            NUGET_TRUSTED_PUBLISHING_USERNAME: ${{ secrets.NUGET_TRUSTED_PUBLISHING_USERNAME }}