Add composite action to upload Debian artifacts to Artifactory

This action parses a .changes file and uploads associated Debian source
and binary artifacts to a specified Artifactory repository.
It supports provenance tagging, architecture detection, and metadata
validation. Includes setup for JFrog CLI and dynamic property assignment
for APT-compatible publishing.

Signed-off-by: VISHAL KUMAR <viskuma@qti.qualcomm.com>

Author: quic-viskuma

upload/action.yml

@@ -0,0 +1,127 @@
+name: "Upload Debian to Artifactory"
+description: "Uploads Debian artifacts from a .changes file to Artifactory"
+inputs:
+  target_repo:
+    description: "Full Artifactory repository URL (e.g. https://qartifactory.qualcomm.com/artifactory/debian-local)"
+    required: true
+  changes_path:
+    description: "Path to Debian .changes file"
+    required: true
+  provenance_info:
+    description: "JSON object with provenance metadata (commit,  workflow, etc.)"
+    required: true
+    default: "{}"
+  secret:
+    description: "Artifactory token"
+    required: true
+
+runs:
+  using: "composite"
+  steps:
+    - name: Install prerequisites
+      shell: bash
+      run: |
+        sudo apt-get update
+        sudo apt-get install -y devscripts dctrl-tools jq
+
+    - name: Setup JFrog CLI
+      uses: jfrog/setup-jfrog-cli@v4
+      with:
+        version: latest
+
+    - name: Configure JFrog server
+      shell: bash
+      env:
+        TARGET_REPO: ${{ inputs.target_repo }}
+        TOKEN: ${{ inputs.secret }}
+      run: |
+        ARTIFACTORY_URL="$(echo "$TARGET_REPO" | sed -E 's|/artifactory.*||')"
+        REPO_KEY="$(basename "$TARGET_REPO")"
+        echo "ARTIFACTORY_URL=$ARTIFACTORY_URL" >> $GITHUB_ENV
+        echo "REPO_KEY=$REPO_KEY" >> $GITHUB_ENV
+        jf c add artifactory-server \
+          --url "$ARTIFACTORY_URL" \
+          --access-token "$TOKEN" \
+          --interactive=false
+
+    - name: Parse .changes and provenance
+      shell: bash
+      env:
+        CHANGES_PATH: ${{ inputs.changes_path }}
+        PROVENANCE_INFO: ${{ inputs.provenance_info }}
+      run: |
+        set -euo pipefail
+        CHANGES_DIR="$(dirname "$CHANGES_PATH")"
+        CHANGES_FILE="$(basename "$CHANGES_PATH")"
+        cd "$CHANGES_DIR"
+
+        SUITE="$(grep-dctrl -ns Distribution . "$CHANGES_FILE" | head -n1)"
+        ARCHS="$(grep-dctrl -ns Architecture . "$CHANGES_FILE" | tr ' ' '\n' | sort -u | tr '\n' ' ' | sed 's/ $//')"
+        SOURCE_PKG="$(grep-dctrl -ns Source . "$CHANGES_FILE" | head -n1)"
+        VERSION="$(grep-dctrl -ns Version . "$CHANGES_FILE" | head -n1)"
+
+        ALL_FILES=$(grep-dctrl -nsFiles . "$CHANGES_FILE" | awk '{print $5}' | tr '\n' ' ')
+        BIN_FILES=$(echo "$ALL_FILES" | tr ' ' '\n' | grep -E '\.(deb|ddeb)$' || true)
+        DSC_FILE=$(echo "$ALL_FILES" | tr ' ' '\n' | grep -E '\.dsc$' || true)
+        SRC_FILES=""
+        if [ -n "$DSC_FILE" ]; then
+          SRC_FILES=$(grep-dctrl -nsFiles . "$DSC_FILE" | awk '{print $3}' | tr '\n' ' ')
+        fi
+
+        COMPONENT=$(echo "$PROVENANCE_INFO" | jq -r '.component // "main"')
+        SRC_COMMIT=$(echo "$PROVENANCE_INFO" | jq -r '.commit // ""')
+
+        PROPS="deb.distribution=${SUITE};deb.component=${COMPONENT};deb.package=${SOURCE_PKG};deb.version=${VERSION}"
+        for key in $(echo "$PROVENANCE_INFO" | jq -r 'keys[]'); do
+          val=$(echo "$PROVENANCE_INFO" | jq -r --arg k "$key" '.[$k]')
+          PROPS="${PROPS};${key}=${val}"
+        done
+
+        echo "SUITE=$SUITE" >> $GITHUB_ENV
+        echo "ARCHS=$ARCHS" >> $GITHUB_ENV
+        echo "SOURCE_PKG=$SOURCE_PKG" >> $GITHUB_ENV
+        echo "VERSION=$VERSION" >> $GITHUB_ENV
+        echo "BIN_FILES=$BIN_FILES" >> $GITHUB_ENV
+        echo "DSC_FILE=$DSC_FILE" >> $GITHUB_ENV
+        echo "SRC_FILES=$SRC_FILES" >> $GITHUB_ENV
+        echo "COMPONENT=$COMPONENT" >> $GITHUB_ENV
+        echo "PROPS=$PROPS" >> $GITHUB_ENV
+
+    - name: Upload source artifacts
+      if: env.DSC_FILE != ''
+      shell: bash
+      env:
+        DSC_FILE: ${{ env.DSC_FILE }}
+        SRC_FILES: ${{ env.SRC_FILES }}
+        PROPS: ${{ env.PROPS }}
+        REPO_KEY: ${{ env.REPO_KEY }}
+        SOURCE_PKG: ${{ env.SOURCE_PKG }}
+      run: |
+        TARGET_PATH="${REPO_KEY}/pool/${SOURCE_PKG}/"
+        jf rt upload --server-id=artifactory-server \
+          --target-props "${PROPS};deb.architecture=source" \
+          "$DSC_FILE" "$TARGET_PATH"
+        for f in $SRC_FILES; do
+          jf rt upload --server-id=artifactory-server \
+            --target-props "${PROPS};deb.architecture=source" \
+            "$f" "$TARGET_PATH"
+        done
+
+    - name: Upload binary artifacts
+      shell: bash
+      env:
+        BIN_FILES: ${{ env.BIN_FILES }}
+        ARCHS: ${{ env.ARCHS }}
+        PROPS: ${{ env.PROPS }}
+        REPO_KEY: ${{ env.REPO_KEY }}
+        SOURCE_PKG: ${{ env.SOURCE_PKG }}
+      run: |
+        TARGET_PATH="${REPO_KEY}/pool/${SOURCE_PKG}/"
+        for bf in $BIN_FILES; do
+          FARCH=$(echo "$bf" | sed -n 's/.*_\([A-Za-z0-9]\+\)\.d\?deb$/\1/p')
+          [ -z "$FARCH" ] && FARCH="$ARCHS"
+          jf rt upload --server-id=artifactory-server \
+            --target-props "${PROPS};deb.architecture=${FARCH}" \
+            "$bf" "$TARGET_PATH"
+        done
+