Create release for tags

Author: Sergey Vilgelm

.github/sv-go-tools-bot.asc.gpg

@@ -5,6 +5,9 @@ on:
     tags:
       - "[0-9]+.[0-9]+.[0-9]+"
 
+env:
+  GPG_KEY: "7D76B375F08A7D93584B36D766538F03CDA385C7"
+
 jobs:
   release:
     runs-on: ubuntu-latest
@@ -18,10 +21,52 @@ jobs:
         run: |
           python -m pip install --upgrade pip
           pip install setuptools wheel twine
+      - name: Prepare gpg
+        run: |
+          gpgconf --kill gpg-agent
+          gpg --quiet --batch --yes --decrypt --passphrase="${{ secrets.GPG_PASSPHRASE }}" --output .github/sv-go-tools-bot.asc .github/sv-go-tools-bot.asc.gpg
+          gpg --batch --yes --import .github/sv-go-tools-bot.asc
       - name: Build and publish
         env:
           TWINE_USERNAME: ${{ secrets.PYPI_USERNAME }}
           TWINE_PASSWORD: ${{ secrets.PYPI_PASSWORD }}
         run: |
           python setup.py sdist bdist_wheel
-          twine upload dist/*
+          twine upload --sign --identity=${GPG_KEY} dist/*
+      - name: Set Version
+        id: version
+        run: echo "::set-output name=version::$(echo ${{ github.ref }} | cut -d'/' -f3)"
+      - name: sign
+        id: sign
+        run: |
+          cd dist
+          export GPG_TTY=$(tty)
+          TARGET="marshmallow_objects-${{ steps.version.outputs.version }}-py3-none-any.whl"
+          gpg --pinentry-mode loopback --batch --yes --default-key ${GPG_KEY} --output "${TARGET}.sig" --detach-sig "${TARGET}"
+          echo "::set-output name=linux::${TARGET}.sig"
+      - name: Create release
+        id: create_release
+        uses: actions/create-release@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          tag_name: ${{ github.ref }}
+          release_name: Release ${{ steps.version.outputs.version }}
+      - name: Upload wheel
+        uses: actions/[email protected]
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          upload_url: ${{ steps.create_release.outputs.upload_url }}
+          asset_path: dist/marshmallow_objects-${{ steps.version.outputs.version }}-py3-none-any.whl
+          asset_name: marshmallow_objects-${{ steps.version.outputs.version }}-py3-none-any.whl
+          asset_content_type: application/octet-stream
+      - name: Upload signature
+        uses: actions/[email protected]
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          upload_url: ${{ steps.create_release.outputs.upload_url }}
+          asset_path: dist/marshmallow_objects-${{ steps.version.outputs.version }}-py3-none-any.whl.sig
+          asset_name: marshmallow_objects-${{ steps.version.outputs.version }}-py3-none-any.whl.sig
+          asset_content_type: application/pgp-signature

.github/workflows/release.yml

@@ -99,3 +99,5 @@ ENV/
 
 # mypy
 .mypy_cache/
+
+.github/sv-go-tools-bot.asc

.gitignore

@@ -21,7 +21,7 @@ keywords = marshmallow objects models yaml json ini config parser
 packages = marshmallow_objects
 
 [bdist_wheel]
-universal = 1
+universal = 0
 
 [flake8]
 max-line-length = 120