From b9a6d46728c9cb5f74cc07fc04ae29c6909ab7fa Mon Sep 17 00:00:00 2001
From: Jay Wu <jay.wu@konghq.com>
Date: Wed, 1 Jul 2026 11:35:43 +0800
Subject: [PATCH] feat(ci): add release_build check option to publish workflow
 (#10195)

* check release_build has been triggered before publishing

* address feedback
---
 .github/workflows/release-publish.yml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/.github/workflows/release-publish.yml b/.github/workflows/release-publish.yml
index b2f6d8ce55..50adf60be1 100644
--- a/.github/workflows/release-publish.yml
+++ b/.github/workflows/release-publish.yml
@@ -4,6 +4,11 @@ run-name: Publish ${{ github.event.inputs.version }} channel by @${{ github.acto
 on:
   workflow_dispatch:
     inputs:
+      release_build:
+        required: true
+        type: boolean
+        default: false
+        description: Confirm that release-build.yml has been triggered for this version
       version:
         required: true
         description: Release version (e.g. 12.5.0)
@@ -37,6 +42,15 @@ jobs:
       contents: write # Required to upload assets. Issue: https://github.com/slsa-framework/slsa-github-generator/tree/main/internal/builders/container#known-issues
       packages: write
     steps:
+      - name: Check Release Build Confirmed
+        env:
+          IS_RELEASE_BUILD_TRIGGERED: ${{ github.event.inputs.release_build }}
+        run: |
+          if [ "$IS_RELEASE_BUILD_TRIGGERED" != "true" ]; then
+            echo "::error title=Missing Release Build::You must check 'release_build' to confirm that release-build.yml has been triggered for this version before running this workflow."
+            exit 1
+          fi
+
       - name: Calculate Release Branch
         env:
           VERSION: ${{ github.event.inputs.version }}