chore(release): 1.36.0 #99
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Application Release | |
| on: | |
| push: | |
| tags: | |
| - 'v*' | |
| jobs: | |
| build_release_assets: | |
| uses: ./.github/workflows/build_release_assets.yml | |
| secrets: inherit | |
| with: | |
| release_mode: true | |
| push_to_pypi: | |
| needs: build_release_assets | |
| runs-on: ubuntu-22.04 | |
| if: github.event_name == 'push' && startsWith(github.event.ref, 'refs/tags') | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Set up Python | |
| uses: actions/setup-python@v5 | |
| with: | |
| python-version: '3.x' | |
| - name: Download wheel and sdist | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: dist | |
| path: dist | |
| - name: Publish distribution 📦 to PyPI | |
| uses: pypa/gh-action-pypi-publish@release/v1 | |
| with: | |
| user: __token__ | |
| password: ${{ secrets.pypi_password }} | |
| release: | |
| runs-on: ubuntu-22.04 | |
| needs: build_release_assets | |
| continue-on-error: true | |
| if: github.event_name == 'push' && startsWith(github.event.ref, 'refs/tags') | |
| # This is required for `gh release create` to work | |
| permissions: | |
| contents: write | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| - name: Read info | |
| id: tags | |
| shell: bash | |
| run: | | |
| echo "tag=${GITHUB_REF/refs\/tags\//}" >> $GITHUB_OUTPUT | |
| - name: Download OS packages | |
| uses: actions/download-artifact@v4 | |
| with: | |
| pattern: os-packages-* | |
| path: packages | |
| merge-multiple: true | |
| - name: Create release | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| run: | | |
| gh release create --draft ${{ steps.tags.outputs.tag }} | |
| - name: Upload release assets | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| run: | | |
| gh release upload \ | |
| ${{ steps.tags.outputs.tag }} \ | |
| packages/ggshield-*.pkg \ | |
| packages/ggshield_*.deb \ | |
| packages/ggshield-*.rpm \ | |
| packages/ggshield-*.zip \ | |
| packages/ggshield-*.gz | |
| push_to_docker_hub: | |
| name: Push Docker image to Docker Hub | |
| runs-on: ubuntu-22.04 | |
| if: github.event_name == 'push' && startsWith(github.event.ref, 'refs/tags') | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| - name: Build and push | |
| uses: docker/build-push-action@v1 | |
| with: | |
| username: ${{ secrets.DOCKER_USERNAME }} | |
| password: ${{ secrets.DOCKER_PASSWORD }} | |
| repository: gitguardian/ggshield | |
| tag_with_ref: true | |
| tags: latest | |
| push_to_github_packages: | |
| name: Push Docker image to GitHub Packages | |
| runs-on: ubuntu-22.04 | |
| if: github.event_name == 'push' && startsWith(github.event.ref, 'refs/tags') | |
| steps: | |
| - name: Check out the repo | |
| uses: actions/checkout@v4 | |
| - name: Push to GitHub Packages | |
| uses: docker/build-push-action@v1 | |
| with: | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| registry: docker.pkg.github.com | |
| repository: gitguardian/ggshield/ggshield | |
| tag_with_ref: true | |
| tags: latest | |
| push_to_tap: | |
| needs: push_to_pypi | |
| name: Push to GitGuardian taps | |
| runs-on: ubuntu-22.04 | |
| if: github.event_name == 'push' && startsWith(github.event.ref, 'refs/tags') | |
| steps: | |
| - name: Set up Python 3.9 | |
| uses: actions/setup-python@v5 | |
| with: | |
| python-version: 3.9 | |
| - name: Checkout Homebrew-tap | |
| uses: actions/checkout@v4 | |
| with: | |
| repository: GitGuardian/homebrew-tap | |
| token: ${{ secrets.PAT_GITHUB }} | |
| - name: Update Homebrew-tap | |
| run: | | |
| version=${GITHUB_REF/refs\/tags\/v/} | |
| git config user.name github-actions | |
| git config user.email [email protected] | |
| scripts/update-ggshield --commit "$version" | |
| git push | |
| push_to_cloudsmith: | |
| needs: build_release_assets | |
| runs-on: ubuntu-22.04 | |
| if: github.event_name == 'push' && startsWith(github.event.ref, 'refs/tags') | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| - name: Download packages | |
| uses: actions/download-artifact@v4 | |
| with: | |
| pattern: os-packages-* | |
| path: packages | |
| merge-multiple: true | |
| - name: Install Cloudsmith CLI | |
| run: pip install cloudsmith-cli | |
| - name: Push to Cloudsmith | |
| run: | | |
| scripts/push-to-cloudsmith | |
| env: | |
| CLOUDSMITH_API_KEY: ${{ secrets.CLOUDSMITH_API_KEY }} |