Make release dependant on successful tests

Author: kiendang

.github/workflows/ci.yml

@@ -32,3 +32,18 @@ jobs:
         shell: bash
       - name: Test virtualenv
         run: scripts/virtualenv_test.sh 0.5.2
+  publish:
+    runs-on: ubuntu-latest
+    needs: [test]
+    if: github.event_name != 'pull_request' && (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v'))
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+      - uses: olafurpg/setup-scala@v13
+      - run: sbt ci-release
+        env:
+          PGP_PASSPHRASE: ${{ secrets.PGP_PASSPHRASE }}
+          PGP_SECRET: ${{ secrets.PGP_SECRET }}
+          SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}
+          SONATYPE_USERNAME: ${{ secrets.SONATYPE_USERNAME }}