release-kit 0.3.14

A canonical release workflow: a technology-agnostic method, per-technology bindings, and the rk CLI that lands and serves them.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20

#!/usr/bin/env sh
# Give vulnerability reporters a private channel where the forge supports it.
set -eu
: "${RK_REPO:?rk sets this; run this script through rk setup}"

private="$(gh api "repos/$RK_REPO" -q .private)"
case "$private" in
  true)
    echo 'check: inapplicable; private vulnerability reporting is available for public repositories'
    exit 0
    ;;
  false) ;;
  *) echo 'cannot read repository visibility; rerun setup guide step 3g' >&2; exit 1 ;;
esac

gh api -X PUT "repos/$RK_REPO/private-vulnerability-reporting" >/dev/null
enabled="$(gh api "repos/$RK_REPO/private-vulnerability-reporting" -q .enabled)"
echo 'check: private vulnerability reporting prints true'
printf '%s\n' "$enabled"
[ "$enabled" = true ]