Merge pull request #33 from kavinthangavel:workflow

fix: fixed workflow files

Author: itskavin

.github/workflows/build-verification.yml

@@ -7,9 +7,9 @@ on:
         required: true
         type: string
 
-permissions: # Default permissions for all jobs
+permissions: 
   contents: read
-  id-token: write # Required for Sigstore OIDC attestation
+  id-token: write 
 
 jobs:
   generate-build-info:
@@ -77,9 +77,6 @@ jobs:
           cosign sign-blob --yes SHA256SUMS.txt --output-signature SHA256SUMS.txt.sig
           echo "Signed checksums file with Sigstore/cosign"
 
-      # The custom provenance step below is removed as GitHub's built-in
-      # provenance via 'gh release create' is used in the create-release workflow.
-
       - name: Upload verification artifacts
         uses: actions/upload-artifact@v4
         with:

.github/workflows/build.yml

@@ -15,7 +15,7 @@ on:
 
 permissions:
   contents: write
-  id-token: write  # Required for provenance and attestation
+  id-token: write  
 
 jobs:
   prepare-release:
@@ -26,7 +26,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v4
         with:
-          fetch-depth: 0  # Fetch all history for changelog generation
+          fetch-depth: 0  
 
       - name: Determine version
         id: get_version
@@ -47,7 +47,6 @@ jobs:
     uses: ./.github/workflows/build-verification.yml
     with:
       version: ${{ needs.prepare-release.outputs.version }}
-    # Permissions are inherited from the calling workflow
 
   publish-pypi:
     needs: prepare-release
@@ -68,26 +67,7 @@ jobs:
       SIMKL_CLIENT_ID: ${{ secrets.SIMKL_CLIENT_ID }}
       SIMKL_CLIENT_SECRET: ${{ secrets.SIMKL_CLIENT_SECRET }}
 
-  # build-macos:
-  #   needs: prepare-release
-  #   uses: ./.github/workflows/macos-build.yml
-  #   with:
-  #     version: ${{ needs.prepare-release.outputs.version }}
-  #   secrets:
-  #     SIMKL_CLIENT_ID: ${{ secrets.SIMKL_CLIENT_ID }}
-  #     SIMKL_CLIENT_SECRET: ${{ secrets.SIMKL_CLIENT_SECRET }}
-
-  # build-linux:
-  #   needs: prepare-release
-  #   uses: ./.github/workflows/linux-build.yml
-  #   with:
-  #     version: ${{ needs.prepare-release.outputs.version }}
-  #   secrets:
-  #     SIMKL_CLIENT_ID: ${{ secrets.SIMKL_CLIENT_ID }}
-  #     SIMKL_CLIENT_SECRET: ${{ secrets.SIMKL_CLIENT_SECRET }}
-
   create-github-release:
-    # needs: [prepare-release, publish-pypi, build-windows, build-macos, build-linux]
     needs: [prepare-release, publish-pypi, build-windows, build-verification]
     uses: ./.github/workflows/create-release.yml
     with:

.github/workflows/create-release.yml

@@ -17,12 +17,12 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write
-      id-token: write  # Required for provenance
+      id-token: write  
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
         with:
-          fetch-depth: 0  # Full history for tag verification
+          fetch-depth: 0  
 
       - name: Verify signed tag
         env:
@@ -99,7 +99,7 @@ jobs:
             echo "Warning: No Windows installer found!"
           fi
 
-      - name: Find Windows Installer # Corrected indentation
+      - name: Find Windows Installer 
         id: find_installer
         run: |
           INSTALLER_PATH=$(find release-artifacts -name "MPSS_Setup_*.exe" -o -name "*.exe" | grep -i "setup" | head -1)
@@ -114,11 +114,10 @@ jobs:
             find release-artifacts -name "*.exe" || echo "No .exe files found"
             exit 1
           fi
-      # Removed incorrect sigstore/gh-action-sigstore step
-      - name: Install cosign # Corrected indentation
-        uses: sigstore/cosign-installer@v3.4.0 # Use the same version as in build-verification.yml
+      - name: Install cosign 
+        uses: sigstore/cosign-installer@v3.4.0
 
-      - name: Sign Windows Installer with Cosign # Corrected indentation
+      - name: Sign Windows Installer with Cosign 
         id: sign_installer
         run: |
           INSTALLER_PATH="${{ steps.find_installer.outputs.path }}"
@@ -127,7 +126,7 @@ jobs:
           echo "Signature created at ${INSTALLER_PATH}.sig"
           echo "signature_path=${INSTALLER_PATH}.sig" >> $GITHUB_OUTPUT
           
-      - name: Prepare verification information # Corrected indentation
+      - name: Prepare verification information 
         run: |
           # Ensure verification-artifacts directory exists
           mkdir -p verification-info
@@ -221,28 +220,6 @@ jobs:
             echo "::warning:: Installer signature file not found at $INSTALLER_SIG_PATH"
           fi
           echo "Verification artifacts uploaded."
-
-          # The Windows installer is now attached during 'gh release create',
-          # so the separate upload step below is removed.
-          
-          # Upload other installers if we have them (commented out for now)
-          # MACOS_DMG=$(find release-artifacts/macos-installers -name "*.dmg" | head -1)
-          # MACOS_PKG=$(find release-artifacts/macos-installers -name "*.pkg" | head -1)
-          # LINUX_APPIMAGE=$(find release-artifacts/linux-installers -name "*.AppImage" | head -1)
-          # LINUX_DEB=$(find release-artifacts/linux-installers -name "*.deb" | head -1)
-          
-          # if [ -n "$MACOS_DMG" ]; then
-          #   gh release upload "v$VERSION" "$MACOS_DMG" --clobber
-          # fi
-          # if [ -n "$MACOS_PKG" ]; then
-          #   gh release upload "v$VERSION" "$MACOS_PKG" --clobber
-          # fi
-          # if [ -n "$LINUX_APPIMAGE" ]; then
-          #   gh release upload "v$VERSION" "$LINUX_APPIMAGE" --clobber
-          # fi
-          # if [ -n "$LINUX_DEB" ]; then
-          #   gh release upload "v$VERSION" "$LINUX_DEB" --clobber
-          # fi
           
       - name: Delete all workflow artifacts after release
         uses: geekyeggo/delete-artifact@v5

.github/workflows/dependencies.yml

@@ -2,7 +2,7 @@ name: Dependency Management
 
 on:
   schedule:
-    - cron: '0 0 * * 1'  # Run weekly on Monday at midnight
+    - cron: '0 0 * * 1'  
   workflow_dispatch:
   pull_request:
     paths:

.github/workflows/docs.yml

@@ -22,12 +22,12 @@ jobs:
   deploy:
     runs-on: ubuntu-latest
     permissions:
-      contents: write # Needed for gh-pages deployment
+      contents: write 
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
         with:
-          fetch-depth: 0 # Needed for mkdocs-git-revision-date-localized-plugin
+          fetch-depth: 0
 
       - name: Set up Python
         uses: actions/setup-python@v5