--wip-- [skip ci]

Author: GuillaumeLagrange

.github/workflows/publish-to-bcr.yml

@@ -9,26 +9,17 @@ on:
         description: 'Release tag to publish (e.g., v1.4.0)'
         required: true
         type: string
-      test_mode:
-        description: 'Test mode: open PR to your fork instead of upstream BCR'
-        required: false
-        type: boolean
-        default: false
-  # TODO: DONT MERGE THIS
-  pull_request:
 
 jobs:
   publish-to-bcr:
     uses: bazel-contrib/publish-to-bcr/.github/workflows/[email protected]
     with:
       tag_name: ${{ github.event.release.tag_name || inputs.tag_name }}
       registry_fork: CodSpeedHQ/bazel-central-registry
-      # TODO: Change this back to bazel-central-registry when ready
+      # TODO: Change this back to bazel-central-registry when initial submission has been approved
       registry: CodSpeedHQ/bazel-central-registry
-      attest: true
-    permissions:
-      contents: write
-      id-token: write
-      attestations: write
+      # If we need this, because it requries tweaking permissions on the BCR_PUBLISH_TOKEN secret
+      # Currently it only has access to the bazel-central-registry repo
+      attest: false
     secrets:
       publish_token: ${{ secrets.BCR_PUBLISH_TOKEN }}