Tufin Release workflow
Before tagging and releasing, verify that CI has passed:
- Find the latest CI run for the current branch:
gh run list --branch $(git branch --show-current) --limit 5 - Check that all required workflow runs have completed successfully (go, lint, govulncheck, etc.)
- If any run is still in progress, wait for it to complete before proceeding
- If any run has failed, stop and report the failure — do NOT tag or release
Only after all CI checks pass:
- Determine the version tag (from user input or by incrementing the latest tag)
- Tag the commit:
git tag <version> - Push the tag:
git push origin <version> - Create the GitHub release:
gh release create <version> ...- Use
--prereleasefor beta/rc tags - Include a summary of changes since the previous release
- Use