Merge pull request #42 from pjbgf/push-artefacts

build: Publish artefacts to the GH release

.github/workflows/release.yml

@@ -6,7 +6,7 @@ on:
       - v*
 
 permissions:
-  contents: read
+  contents: write # Upload artefacts to release.
 
 jobs:
   build:
@@ -35,3 +35,7 @@ jobs:
         PRODUCTION_AWS_ACCESS_KEY_ID: ${{ secrets.PRODUCTION_AWS_ACCESS_KEY_ID }}
         PRODUCTION_AWS_SECRET_ACCESS_KEY: ${{ secrets.PRODUCTION_AWS_SECRET_ACCESS_KEY }}
         PRODUCTION_AWS_S3_BUCKET: ${{ secrets.PRODUCTION_AWS_S3_BUCKET }}
+
+    - run: make upload-gh
+      env:
+          GH_TOKEN: ${{ github.token }}

Makefile

@@ -80,6 +80,13 @@ upload: $(AWSCLI) version ## uploads all artefacts from each policy into S3.
     PRODUCTION_AWS_S3_BUCKET="$(PRODUCTION_AWS_S3_BUCKET)" \
 		./hack/upload
 
+upload-gh: $(GH) ## upload all artefacts to the GitHub release.
+	$(MAKE) $(addsuffix -upload-gh, $(POLICIES))
+
+%-upload-gh:
+	TAG=$(TAG) \
+		./hack/upload-gh $(subst :,/,$*)
+
 version: ## parse and display version.
 ifdef VERSION_MSG
 	@echo  $(VERSION_MSG); exit 1

hack/make/tools.mk

@@ -5,3 +5,8 @@ $(AWSCLI): ## Download awscliv2 if not yet downloaded.
 	curl "https://awscli.amazonaws.com/awscli-exe-linux-$(shell uname -m).zip" -o "$(TOOLS_BIN)/awscliv2.zip"
 	cd $(TOOLS_BIN) && unzip -q $(TOOLS_BIN)/awscliv2.zip
 	rm $(TOOLS_BIN)/awscliv2.zip
+
+GH = $(shell which gh)
+$(GH):
+	echo "GitHub CLI gh was not found. To install use your package manager."
+	exit 1

hack/upload-gh

@@ -0,0 +1,56 @@
+#!/bin/bash
+set -eo pipefail
+
+BASE_DIR="build"
+
+function usage(){
+    echo "$0 <policy>"
+    exit 1
+}
+
+function check_input(){
+    policy=$1
+    if [[ ! -d "${BASE_DIR}/${policy}" ]]; then
+        echo "Policy ${policy} not found, run make build and try again."
+        exit 2
+    fi
+
+    [ -z "${TAG}" ] && echo "TAG is not set." && exit 1
+    return 0
+}
+
+function checksum_file(){
+    policy=$1
+
+    sumfile="${BASE_DIR}/${policy}/sha256sum-${policy}-noarch.txt"
+    echo -n "" > "${sumfile}"
+
+    files=$(ls build/"${policy}"/**/*.rpm)
+    for file in ${files}; do
+      sha256sum "${file}" | sed "s;$(dirname ${file})/;;g" >> "${sumfile}"
+    done
+
+    cat "${sumfile}"
+}
+
+function upload_files(){
+    policy=$1
+
+    files=("${BASE_DIR}/${policy}/sha256sum-${policy}-noarch.txt ")
+    files+=$(ls build/"${policy}"/**/*.rpm)
+
+    for file in ${files}; do
+        gh release upload ${TAG} $file
+    done
+}
+
+function main()
+{
+    check_input "$1"
+    checksum_file "$1"
+    upload_files "$1"
+}
+
+[[ -z "$1" ]] && usage
+
+main "$1"