ci: fix update-homebrew-formula.yml (#1575)

* ci: use local homebrew tap to release CLI

* ci: split steps

* ci: update

* ci: fix permission

* ci: fix permission

* ci: fix permission

* ci: add token

* ci: update

* ci: update

* ci: fix token

* ci: clean up

Author: PengyuanZhao

.github/workflows/chocolatey-release.yml

@@ -9,6 +9,7 @@ on:
 
 jobs:
   publish-chocolatey:
+    if: ${{ github.event.workflow_run.conclusion == 'success' }}
     runs-on: windows-latest
     steps:
       - uses: actions/checkout@v4

.github/workflows/update-cli-docs.yml

@@ -9,6 +9,7 @@ on:
 
 jobs:
   update-cli-docs:
+    if: ${{ github.event.workflow_run.conclusion == 'success' }}
     runs-on: ubuntu-latest
     outputs:
       git-sha: ${{ steps.update.outputs.git-sha }}

.github/workflows/update-homebrew-formula.yml

@@ -9,26 +9,38 @@ on:
 
 jobs:
   update-homefrew-formula:
+    if: ${{ github.event.workflow_run.conclusion == 'success' }}
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
         uses: actions/checkout@v4
         with:
           repository: lacework/homebrew-tap
           path: homebrew-tap
+          token: ${{ secrets.token }}
+
       - name: Set up Homebrew
         id: set-up-homebrew
         uses: Homebrew/actions/setup-homebrew@master
+
+      - name: Create local Homebrew tap
+        working-directory: homebrew-tap
+        run: |
+          brew tap-new lacework/lacework-cli --no-git
+          sudo cp -r . $(brew --repository)/Library/Taps/lacework/homebrew-lacework-cli/
+
       - name: Update CLI Version
         working-directory: homebrew-tap
         env:
           GPG_SECRET_KEY: ${{ secrets.GPG_SECRET_KEY }}
           GPG_SIGNING_KEY: ${{ secrets.GPG_SIGNING_KEY }}
+          CI: true
         run: |
-          sudo apt-get update -y
-          sudo apt-get install gpg-agent -y
+          sudo chmod -R 777 $(brew --repository)/Library/Taps/lacework/homebrew-lacework-cli/.git
+          cd $(brew --repository)/Library/Taps/lacework/homebrew-lacework-cli/
           echo "$GPG_SECRET_KEY" | base64 --decode | gpg --import --no-tty --batch --yes
           make update-cli-version
+
       - name: Notify Slack on Failure
         if: failure()
         uses: slackapi/[email protected]