name: 'Publish immutable action version'

on:
  workflow_dispatch:
  release:
    types:
      - 'published'

jobs:
  publish:
    runs-on: 'ubuntu-latest'
    permissions:
      contents: 'read'
      id-token: 'write'
      packages: 'write'

    steps:
      - name: 'Checkout'
        uses: 'actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683' # ratchet:actions/checkout@v4

      - name: 'Publish'
        id: 'publish'
        uses: 'actions/publish-immutable-action@4bc8754ffc40f27910afb20287dbbbb675a4e978' # ratchet:actions/publish-immutable-action@v0.0.4
        with:
          github-token: '${{ secrets.GITHUB_TOKEN }}'