Hardening publishing pipeline

[josejimenezluna]

Rotate CONDA_TOKEN secret, add environment guard to conda.yml workflow, restrict who can trigger the release workflow.

[temporaer]

maybe better:

name: conda

on:
  release:
    types:
      - published

permissions:
  contents: read

jobs:
  build-linux:
    runs-on: ubuntu-latest
    defaults:
      run:
        shell: bash -l {0}
    steps:
      - uses: actions/checkout@v4

      - uses: conda-incubator/setup-miniconda@v3
        with:
          activate-environment: molskill
          environment-file: environment.yml
          condarc-file: conda-recipe/.condarc
          python-version: 3.9
          auto-activate-base: false

      - name: Build conda package
        run: |
          conda info
          conda install conda-build anaconda-client boa --yes
          boa build conda-recipe/

      - name: Collect packages
        run: |
          mkdir -p dist-conda
          find "$CONDA_PREFIX/../conda-bld" \
            \( -name '*.conda' -o -name '*.tar.bz2' \) \
            -type f \
            -print \
            -exec cp {} dist-conda/ \;

      - uses: actions/upload-artifact@v4
        with:
          name: conda-packages-linux
          path: dist-conda/*

  publish:
    needs: build-linux
    environment: conda-release
    runs-on: ubuntu-latest
    steps:
      - uses: actions/download-artifact@v4
        with:
          name: conda-packages-linux
          path: dist-conda

      - uses: conda-incubator/setup-miniconda@v3
        with:
          auto-activate-base: true

      - name: Install uploader
        run: conda install anaconda-client --yes

      - name: Publish to Anaconda
        env:
          ANACONDA_API_TOKEN: ${{ secrets.ANACONDA_API_TOKEN }}
        run: |
          shopt -s nullglob
          for pkg in dist-conda/*.conda dist-conda/*.tar.bz2; do
            anaconda -t "${ANACONDA_API_TOKEN}" upload -u msr-ai4science "${pkg}"
          done

this way, if malicious code in build step infects your runtime environment, it won't be able to leak the token later.