From f9a58650e86f43a22136938a077ab94635ba3a07 Mon Sep 17 00:00:00 2001
From: Ethan Paul <ethan@freedom.press>
Date: Fri, 24 Jul 2026 15:12:19 -0400
Subject: [PATCH] Add notify job to update k8s manifests on image rebuild

---
 .github/workflows/publish.yaml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index d4045c6..f45bb13 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -23,3 +23,19 @@ jobs:
       add-branch-tags: true
     secrets:
       registry-password: ${{ secrets.GITHUB_TOKEN }}
+
+  notify:
+    uses: freedomofpress/actionslib/.github/workflows/update-k8s-trigger.yaml@main
+    needs:
+    - build
+    if: ${{ needs.build.result == 'success' }}
+    permissions:
+      contents: read
+      actions: read
+      pull-requests: read
+    with:
+      trigger: https-everywhere/${{ github.ref_name }}
+      sha: ${{ github.sha }}
+    secrets:
+      local-token: ${{ secrets.GITHUB_TOKEN }}
+      k8s-configs-token: ${{ secrets.K8S_CONFIGS_GITHUB_TOKEN }}