From 41a6d86add001738b62088f607ba518e002de88c Mon Sep 17 00:00:00 2001
From: Elvis Wianda <elvis@benchsci.com>
Date: Mon, 7 Sep 2026 14:52:34 -0400
Subject: [PATCH] Add publish-to-bcr GitHub Actions workflow

Migrate from the deprecated publish-to-bcr GitHub App to the
reusable Actions workflow. Closes #70.

Requires a BCR_PUBLISH_TOKEN repository secret (Classic PAT with
workflow + repo scopes).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 .github/workflows/publish-to-bcr.yaml | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)
 create mode 100644 .github/workflows/publish-to-bcr.yaml

diff --git a/.github/workflows/publish-to-bcr.yaml b/.github/workflows/publish-to-bcr.yaml
new file mode 100644
index 0000000..8706106
--- /dev/null
+++ b/.github/workflows/publish-to-bcr.yaml
@@ -0,0 +1,25 @@
+name: Publish to BCR
+
+on:
+    release:
+        types: [published]
+    workflow_dispatch:
+        inputs:
+            tag_name:
+                required: true
+                type: string
+                description: 'The release tag to publish (e.g. v0.9.0)'
+
+jobs:
+    publish:
+        uses: bazel-contrib/publish-to-bcr/.github/workflows/publish.yaml@v1.5.0
+        with:
+            tag_name: ${{ inputs.tag_name || github.event.release.tag_name }}
+            registry_fork: benchsci/bazel-central-registry
+            attest: true
+        permissions:
+            contents: write
+            id-token: write
+            attestations: write
+        secrets:
+            publish_token: ${{ secrets.BCR_PUBLISH_TOKEN }}