update script/build to support artifact_dir and use it everywhere in the release job

Author: GrantBirki

.github/workflows/release.yml

@@ -21,6 +21,7 @@ jobs:
       gem_name: ${{ steps.build.outputs.gem_name }}
       gem_version: ${{ steps.build.outputs.gem_version }}
       gem_path: ${{ steps.build.outputs.gem_path }}
+      artifact_dir: ${{ steps.build.outputs.artifact_dir }}
 
     steps:
       - name: checkout
@@ -39,6 +40,7 @@ jobs:
       # gem_name: the name of the gem - ex: "my-cool-gem"
       # gem_version: the version of the gem - ex: "1.0.0"
       # gem_path: the path/filename of the gem - ex: "my-cool-gem-1.0.0.gem"
+      # artifact_dir: the path to the dir where artifacts are stored - ex: "dist"
       - name: build
         id: build
         run: script/build
@@ -47,7 +49,9 @@ jobs:
         uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # [email protected]
         id: upload-artifact
         with:
-          path: "${{ steps.build.outputs.gem_path }}"
+          name: ${{ steps.build.outputs.artifact_dir }}
+          path: ${{ steps.build.outputs.artifact_dir }}
+          if-no-files-found: error
 
   release:
     needs: build
@@ -65,14 +69,20 @@ jobs:
       - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # [email protected]
         with:
           artifact-ids: ${{ needs.build.outputs.artifact-id }}
+          path: ${{ needs.build.outputs.artifact_dir }}
+
+      - name: view artifact
+        env:
+          ARTIFACT_PATH: ${{ needs.build.outputs.artifact_dir }}
+        run: tree -L 2 -a --dirsfirst -C -F -h -D "${ARTIFACT_PATH}"
 
       - name: Publish to GitHub Packages
         env:
           OWNER: ${{ github.repository_owner }}
           GEM_NAME: ${{ needs.build.outputs.gem_name }}
           GEM_VERSION: ${{ needs.build.outputs.gem_version }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          ARTIFACT_PATH: "artifact"
+          ARTIFACT_PATH: ${{ needs.build.outputs.artifact_dir }}
         run: |
           GEM_HOST_API_KEY=${GITHUB_TOKEN} gem push --key github --host https://rubygems.pkg.github.com/${OWNER} $ARTIFACT_PATH/${GEM_NAME}-${GEM_VERSION}.gem
 
@@ -90,14 +100,14 @@ jobs:
         env:
           GEM_NAME: ${{ needs.build.outputs.gem_name }}
           GEM_VERSION: ${{ needs.build.outputs.gem_version }}
-          ARTIFACT_PATH: "artifact"
+          ARTIFACT_PATH: ${{ needs.build.outputs.artifact_dir }}
         run: bundle exec sigstore-cli sign ${ARTIFACT_PATH}/${GEM_NAME}-${GEM_VERSION}.gem --bundle ${GEM_NAME}-${GEM_VERSION}.sigstore.json
 
       - name: Publish to RubyGems
         env:
           GEM_NAME: ${{ needs.build.outputs.gem_name }}
           GEM_VERSION: ${{ needs.build.outputs.gem_version }}
-          ARTIFACT_PATH: "artifact"
+          ARTIFACT_PATH: ${{ needs.build.outputs.artifact_dir }}
         run: gem push ${ARTIFACT_PATH}/${GEM_NAME}-${GEM_VERSION}.gem --attestation ${GEM_NAME}-${GEM_VERSION}.sigstore.json
 
       - name: await gem
@@ -111,7 +121,7 @@ jobs:
           GEM_NAME: ${{ needs.build.outputs.gem_name }}
           GEM_VERSION: ${{ needs.build.outputs.gem_version }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          ARTIFACT_PATH: "artifact"
+          ARTIFACT_PATH: ${{ needs.build.outputs.artifact_dir }}
         run: |
           gh release create "v${GEM_VERSION}" \
             "${ARTIFACT_PATH}/${GEM_NAME}-${GEM_VERSION}.gem" \
@@ -130,12 +140,13 @@ jobs:
     steps:
       - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # [email protected]
         with:
+          path: ${{ needs.build.outputs.artifact_dir }}
           artifact-ids: ${{ needs.build.outputs.artifact-id }}
 
       - name: attest build provenance
         uses: actions/attest-build-provenance@977bb373ede98d70efdf65b84cb5f73e068dcc2a # [email protected]
         with:
-          subject-path: "artifact/${{ needs.build.outputs.gem_path }}"
+          subject-path: "${{ needs.build.outputs.artifact_dir }}/${{ needs.build.outputs.gem_path }}"
 
   verify:
     permissions: {}
@@ -145,12 +156,13 @@ jobs:
     steps:
       - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # [email protected]
         with:
+          path: ${{ needs.build.outputs.artifact_dir }}
           artifact-ids: ${{ needs.build.outputs.artifact-id }}
 
       - name: verify
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           OWNER: ${{ github.repository_owner }}
           REPO: ${{ github.event.repository.name }}
-          ARTIFACT_PATH: "artifact/${{ needs.build.outputs.gem_path }}"
+          ARTIFACT_PATH: "${{ needs.build.outputs.artifact_dir }}/${{ needs.build.outputs.gem_path }}"
         run: gh attestation verify "$ARTIFACT_PATH" --repo ${OWNER}/${REPO} --signer-workflow ${OWNER}/${REPO}/.github/workflows/release.yml

script/build

@@ -14,6 +14,10 @@ if [[ "$CI" == "true" ]]; then
   echo "gem_name=$GEM_NAME" >> $GITHUB_OUTPUT
   echo "gem_version=$GEM_VERSION" >> $GITHUB_OUTPUT
   echo "gem_path=$GEM_NAME-$GEM_VERSION.gem" >> $GITHUB_OUTPUT
+  mkdir -p dist/
+  mv $GEM_NAME-$GEM_VERSION.gem dist/
+  ls -lah dist/
+  echo "artifact_dir=dist" >> $GITHUB_OUTPUT
 fi
 
 echo -e "📦 ${GREEN}successfully${OFF} built ${PURPLE}$GEM_NAME-$GEM_VERSION.gem${OFF}"