aipm/.github/workflows/release-please.yml at 1d526236e52b347e79562431ba7089326ea9024b · TrogonStack/aipm · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
name: Release Please

on:
  push:
    branches:
      - main

permissions:
  contents: write
  pull-requests: write
  attestations: write

jobs:
  release-please:
    runs-on: ubuntu-latest
    outputs:
      release_created: ${{ steps.release.outputs.release_created }}
      tag_name: ${{ steps.release.outputs.tag_name }}
    steps:
      - uses: googleapis/release-please-action@v4
        id: release
        with:
          token: ${{ secrets.GH_PAT_RELEASE_PLEASE_ACTION }}
          release-type: node
          config-file: .github/release-please-config.json
          manifest-file: .github/release-please-manifest.json

  build-and-upload:
    needs: release-please
    if: ${{ needs.release-please.outputs.release_created }}
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: oven-sh/setup-bun@v2

      - name: Install dependencies
        run: bun install

      - name: Build all platforms
        run: bun run build:all

      - name: Generate artifact attestations
        uses: actions/attest-build-provenance@v2
        with:
          subject-path: dist/*

      - name: Generate SBOM
        uses: anchore/sbom-action@v0
        with:
          path: ./
          artifact-name: sbom-spdx.json
          output-file: ./sbom-spdx.json

      - name: Attest SBOM
        uses: actions/attest-sbom@v2
        with:
          subject-path: 'dist/*'
          sbom-path: './sbom-spdx.json'

      - name: Upload release artifacts
        uses: softprops/action-gh-release@v1
        with:
          tag_name: ${{ needs.release-please.outputs.tag_name }}
          files: |
            dist/*
            sbom-spdx.json