Merge pull request #20 from codecov/th/fix-push-tag

fix: push new tags to extensions

Author: thomasrockhu-codecov

.github/workflows/push-tag-to-extensions.yml

@@ -6,14 +6,42 @@ on:  # yamllint disable-line rule:truthy
     # Pattern matched against refs/tags
     tags:
       - '*'
+
 jobs:
-  bitrise-step:
+  set-version:
     runs-on: ubuntu-latest
+    outputs:
+      CODECOV_WRAPPER_VERSION: ${{ steps.version_output.outputs.CODECOV_WRAPPER_VERSION }}
     steps:
-      - name: Run version
-        run: ./scripts/version.sh
       - name: Checkout
-        uses: ./.github/workflows/push-tag.yml@main
-        with:
-          repository: "codecov/codecov-bitrise"
-          version: ${{ env.CODECOV_WRAPPER_VERSION }}
+        uses: actions/checkout@v4
+      - name: Set version variable
+        id: version_output
+        run: |
+          version=$(cat scripts/version.sh | grep 'CODECOV_WRAPPER_VERSION=' | cut -d\" -f2)
+          echo $version
+          echo "CODECOV_WRAPPER_VERSION=$version" >> $GITHUB_OUTPUT
+
+  bitrise-step:
+    needs: set-version
+    uses: ./.github/workflows/push-tag.yml
+    with:
+      repository: "codecov-bitrise"
+      version: "${{ needs.set-version.outputs.CODECOV_WRAPPER_VERSION }}"
+    secrets: inherit
+
+  circleci-orb:
+    needs: set-version
+    uses: ./.github/workflows/push-tag.yml
+    with:
+      repository: "codecov-circleci-orb"
+      version: "${{ needs.set-version.outputs.CODECOV_WRAPPER_VERSION }}"
+    secrets: inherit
+
+  github-action:
+    needs: set-version
+    uses: ./.github/workflows/push-tag.yml
+    with:
+      repository: "codecov-action"
+      version: "${{ needs.set-version.outputs.CODECOV_WRAPPER_VERSION }}"
+    secrets: inherit

.github/workflows/push-tag.yml

@@ -1,4 +1,4 @@
----
+
 # yamllint disable rule:line-length
 name: Push tag to extension
 on:  # yamllint disable-line rule:truthy
@@ -17,11 +17,27 @@ jobs:
     permissions:
       contents: write
       pull-requests: write
+      id-token: write
+
     steps:
+      - name: Echo inputs
+        run: |
+          echo "repository: ${{ inputs.repository }}"
+          echo "version: ${{ inputs.version }}"
+
+      - name: Generate a token
+        id: app-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.RELEASER_APP_ID }}
+          private-key: ${{ secrets.RELEASER_APP_PRIVATE_KEY }}
+          repositories: ${{ inputs.repository }}
+
       - name: Checkout
         uses: actions/checkout@v4
         with:
-          repository: ${{ inputs.repository }}
+          repository: codecov/${{ inputs.repository }}
+          token: ${{ steps.app-token.outputs.token }}
 
       - name: Import GPG key
         id: import-gpg
@@ -36,19 +52,19 @@ jobs:
         run: git checkout -b release/wrapper/${{ inputs.version }}
 
       - name: Pull latest wrapper
-        run: |
-          git submodule update --init --recursive --remote
+        run: git submodule update --init --recursive --remote
 
       - name: Make commit
         run: |
+          git add src/scripts
           git commit -S --message "chore(release): wrapper-${{ inputs.version }}"
-          git push origin release/wrapper/${{ inputs.version }}
+          git push origin release/wrapper/${{ inputs.version }} -f
 
       - name: Install GitHub CLI
         uses: dev-hanz-ops/[email protected]
 
       - name: Create pull request into main
         run: |
-          gh pr create --title "chore(release): wrapper-${{ inputs.version}}" --body "---" --base "main"
+          gh pr create --fill --base "main" --reviewer "codecov/report-upload"
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}