-
Notifications
You must be signed in to change notification settings - Fork 4
136 lines (135 loc) · 4.08 KB
/
release-aqua-enterprise-scanner.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
# ~~ Generated by projen. To modify, edit .projenrc.ts and run "npx projen".
name: release-aqua-enterprise-scanner
on:
push:
branches:
- main
jobs:
build:
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- name: Checkout
uses: actions/checkout@v3
- name: Set git identity
run: |-
git config user.name "github-actions"
git config user.email "[email protected]"
- run: yarn install
- name: build:aqua-enterprise-scanner
run: npx projen build:aqua-enterprise-scanner
- run: mv packages/@cdk-cloudformation/aqua-enterprise-scanner/dist .
- name: Upload artifact
if: always()
uses: actions/[email protected]
with:
name: build-artifact
path: dist
container:
image: jsii/superchain:1-buster-slim-node16
release_npm:
name: Publish to npm
needs: build
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- uses: actions/setup-node@v3
with:
node-version: 16.x
- name: Download build artifacts
uses: actions/download-artifact@v3
with:
name: build-artifact
path: dist
- name: Restore build artifact permissions
run: cd dist && setfacl --restore=permissions-backup.acl
continue-on-error: true
- name: Release
env:
NPM_DIST_TAG: latest
NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
run: npx -p publib@latest publib-npm
release_maven:
name: Publish to Maven Central
needs: build
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- uses: actions/setup-java@v3
with:
distribution: temurin
java-version: 11.x
- uses: actions/setup-node@v3
with:
node-version: 16.x
- name: Download build artifacts
uses: actions/download-artifact@v3
with:
name: build-artifact
path: dist
- name: Restore build artifact permissions
run: cd dist && setfacl --restore=permissions-backup.acl
continue-on-error: true
- name: Release
env:
MAVEN_ENDPOINT: https://s01.oss.sonatype.org
MAVEN_GPG_PRIVATE_KEY: ${{ secrets.MAVEN_GPG_PRIVATE_KEY }}
MAVEN_GPG_PRIVATE_KEY_PASSPHRASE: ${{ secrets.MAVEN_GPG_PRIVATE_KEY_PASSPHRASE }}
MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}
MAVEN_USERNAME: ${{ secrets.MAVEN_USERNAME }}
MAVEN_STAGING_PROFILE_ID: ${{ secrets.MAVEN_STAGING_PROFILE_ID }}
run: npx -p publib@latest publib-maven
release_nuget:
name: Publish to NuGet Gallery
needs: build
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- uses: actions/setup-node@v3
with:
node-version: 16.x
- uses: actions/setup-dotnet@v3
with:
dotnet-version: 3.x
- name: Download build artifacts
uses: actions/download-artifact@v3
with:
name: build-artifact
path: dist
- name: Restore build artifact permissions
run: cd dist && setfacl --restore=permissions-backup.acl
continue-on-error: true
- name: Release
env:
NUGET_API_KEY: ${{ secrets.NUGET_API_KEY }}
run: npx -p publib@latest publib-nuget
release_pypi:
name: Publish to PyPI
needs: build
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- uses: actions/setup-node@v3
with:
node-version: 16.x
- uses: actions/setup-python@v4
with:
python-version: 3.x
- name: Download build artifacts
uses: actions/download-artifact@v3
with:
name: build-artifact
path: dist
- name: Restore build artifact permissions
run: cd dist && setfacl --restore=permissions-backup.acl
continue-on-error: true
- name: Release
env:
TWINE_USERNAME: ${{ secrets.TWINE_USERNAME }}
TWINE_PASSWORD: ${{ secrets.TWINE_PASSWORD }}
run: npx -p publib@latest publib-pypi