Added MacOS build CI

Author: DebaA17

.github/workflows/release.yml

@@ -11,139 +11,108 @@ permissions:
 
 jobs:
   build:
-    name: Build (${{ matrix.asset_suffix }})
-    runs-on: ${{ matrix.runs_on }}
+    name: Build (${{ matrix.os }})
+    runs-on: ${{ matrix.os }}
+
     strategy:
       fail-fast: false
       matrix:
         include:
-          - runs_on: windows-latest
-            asset_suffix: windows-x64
-            add_data: "VERSION;."
-            exe_name: cvecli.exe
-          - runs_on: ubuntu-latest
-            asset_suffix: linux-x64
-            add_data: "VERSION:."
-            exe_name: cvecli
-          - runs_on: macos-13
-            asset_suffix: macos-x64
-            add_data: "VERSION:."
-            exe_name: cvecli
-          - runs_on: macos-14
-            asset_suffix: macos-arm64
-            add_data: "VERSION:."
-            exe_name: cvecli
+          - os: windows-latest
+            exe: cvecli.exe
+            asset: windows
+          - os: ubuntu-latest
+            exe: cvecli
+            asset: linux
+          - os: macos-latest
+            exe: cvecli
+            asset: macos
 
     steps:
-      - name: Checkout
-        uses: actions/checkout@v4
+      - uses: actions/checkout@v4
 
-      - name: Derive version
-        id: version
+      - name: Set version
         shell: bash
         run: |
-          tag="${GITHUB_REF_NAME}"
-          version="${tag#v}"
-          echo "version=$version" >> "$GITHUB_OUTPUT"
-          printf '%s\n' "$version" > VERSION
+          echo "VERSION=${GITHUB_REF_NAME#v}" >> $GITHUB_ENV
+          printf '%s\n' "${GITHUB_REF_NAME#v}" > VERSION
 
-      - name: Set up Python
+      - name: Setup Python
         uses: actions/setup-python@v5
         with:
           python-version: "3.12"
+          cache: "pip"
+          cache-dependency-path: "requirements.txt"
 
       - name: Install dependencies
-        shell: bash
         run: |
-          python -m pip install --upgrade pip
-          python -m pip install -r requirements.txt
-          python -m pip install pyinstaller
+          pip install --upgrade pip
+          pip install -r requirements.txt
+          pip install pyinstaller
 
-      - name: Build binary (PyInstaller)
+      - name: Build binary
         shell: bash
         run: |
-          pyinstaller --noconfirm --clean --onefile --name cvecli --add-data "${{ matrix.add_data }}" cve_search_cli.py
+          add_data="VERSION:."
+          if [ "${{ runner.os }}" = "Windows" ]; then
+            add_data="VERSION;."
+          fi
+          pyinstaller --noconfirm --clean --onefile \
+            --name cvecli \
+            --add-data "$add_data" \
+            cve_search_cli.py
 
-      - name: Package + checksums
+      - name: Package release artifact
         shell: bash
         run: |
-          python - <<'PY'
-          import hashlib
-          import os
-          import pathlib
-          import zipfile
-          from datetime import datetime
-          
-          version = os.environ["VERSION"]
-          suffix = os.environ["ASSET_SUFFIX"]
-          exe_name = os.environ["EXE_NAME"]
-          
-          repo = pathlib.Path(".").resolve()
-          dist = repo / "dist"
-          exe_path = dist / exe_name
-          if not exe_path.exists():
-            raise SystemExit(f"missing built binary: {exe_path}")
-          
-          zip_name = f"cvecli-{version}-{suffix}.zip"
-          sha_name = f"SHA256SUMS-{suffix}.txt"
-          
-          def sha256_file(path: pathlib.Path) -> str:
-            h = hashlib.sha256()
-            with path.open("rb") as f:
-              for chunk in iter(lambda: f.read(1024 * 1024), b""):
-                h.update(chunk)
-            return h.hexdigest()
-          
-          files_for_zip = [
-            (exe_path, exe_name),
-            (repo / "LICENSE", "LICENSE"),
-            (repo / "README.md", "README.md"),
-          ]
-          
-          with zipfile.ZipFile(zip_name, "w", compression=zipfile.ZIP_DEFLATED) as zf:
-            for src, arc in files_for_zip:
-              zf.write(src, arcname=arc)
-          
-          lines = []
-          lines.append(f"{sha256_file(exe_path)}  {exe_name}")
-          lines.append(f"{sha256_file(pathlib.Path(zip_name))}  {zip_name}")
-          pathlib.Path(sha_name).write_text("\n".join(lines) + "\n", encoding="ascii")
-          print(f"Wrote {zip_name} and {sha_name} at {datetime.utcnow().isoformat()}Z")
-          PY
-        env:
-          VERSION: ${{ steps.version.outputs.version }}
-          ASSET_SUFFIX: ${{ matrix.asset_suffix }}
-          EXE_NAME: ${{ matrix.exe_name }}
-
-      - name: Upload artifacts
+          mkdir -p release
+
+          ZIP_NAME="cvecli-${VERSION}-${{ matrix.asset }}.zip"
+
+          cp "dist/${{ matrix.exe }}" release/
+          cp README.md release/
+          cp LICENSE release/
+
+          cd release
+          zip -r "../$ZIP_NAME" .
+
+          cd ..
+
+          python - <<'EOF'
+import hashlib, pathlib, os
+
+file = pathlib.Path("$ZIP_NAME")
+sha = hashlib.sha256(file.read_bytes()).hexdigest()
+
+with open("checksums.txt", "a") as f:
+    f.write(f"{sha}  {file.name}\n")
+EOF
+
+      - name: Upload artifact
         uses: actions/upload-artifact@v4
         with:
-          name: release-${{ matrix.asset_suffix }}
+          name: ${{ matrix.asset }}
           path: |
-            dist/${{ matrix.exe_name }}
-            cvecli-${{ steps.version.outputs.version }}-${{ matrix.asset_suffix }}.zip
-            SHA256SUMS-${{ matrix.asset_suffix }}.txt
+            cvecli-${{ env.VERSION }}-${{ matrix.asset }}.zip
+            checksums.txt
 
   release:
-    name: Create GitHub Release
+    name: Create Release
     runs-on: ubuntu-latest
     needs: build
+
     steps:
-      - name: Download artifacts
-        uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v4
         with:
-          path: release_assets
+          path: artifacts
 
-      - name: Consolidate checksums
-        shell: bash
+      - name: Merge checksums
         run: |
-          set -euo pipefail
-          find release_assets -type f -name "SHA256SUMS-*.txt" -print0 | sort -z | xargs -0 cat > SHA256SUMS.txt
+          cat artifacts/**/checksums.txt > checksums.txt
 
-      - name: Publish GitHub Release assets
+      - name: Publish GitHub Release
         uses: softprops/action-gh-release@v2
         with:
           files: |
-            release_assets/**/cvecli*
-            release_assets/**/SHA256SUMS-*.txt
-            SHA256SUMS.txt
+            artifacts/**/*.zip
+            checksums.txt