limit codeql and fix get tag name #20

	name: release

	on:
	push:
	branches:
	- master
	tags:
	- '..*'

	env:
	PIP_DISABLE_PIP_VERSION_CHECK: 1
	DEST_FOLDER: dist/

	jobs:
	build:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout the repo
	uses: actions/checkout@v4

	- name: Get the version
	id: vars
	run: echo "tag=${{ github.event.release.tag_name }}" >> $GITHUB_OUTPUT

	- name: Install py39
	uses: actions/setup-python@v5
	with:
	python-version: 3.9
	cache: pip
	cache-dependency-path: 'requirements/*.pip'
	- name: build
	shell: bash
	env:
	RELEASE_VERSION: ${{ steps.vars.outputs.tag }}
	run: \|
	python -m pip install --upgrade -r requirements/pip-tools.pip
	echo "python igor.py build_next $RELEASE_VERSION"
	python igor.py build_next "$RELEASE_VERSION"
	- name: Release PyPI
	shell: bash
	env:
	TWINE_USERNAME: ${{ secrets.TWINE_USERNAME }}
	TWINE_PASSWORD: ${{ secrets.PYPI_TOKEN }}
	run: \|
	pip install --upgrade twine
	twine upload ${{ env.DEST_FOLDER }}*
	- name: Release GitHub
	uses: softprops/action-gh-release@v1
	with:
	files: ${{ env.DEST_FOLDER }}*
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Provide feedback