Release: Windows artifacts on tags

Author: DebaA17

.github/workflows/windows-release.yml

@@ -0,0 +1,73 @@
+name: Windows release
+
+on:
+  workflow_dispatch:
+  push:
+    tags:
+      - "v*"
+
+permissions:
+  contents: write
+
+jobs:
+  build:
+    runs-on: windows-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Derive version
+        id: version
+        shell: bash
+        run: |
+          tag="${GITHUB_REF_NAME}"
+          version="${tag#v}"
+          echo "version=$version" >> "$GITHUB_OUTPUT"
+          printf '%s\n' "$version" > VERSION
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Install dependencies
+        shell: bash
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install -r requirements.txt
+          python -m pip install pyinstaller
+
+      - name: Build cvecli.exe (PyInstaller)
+        shell: bash
+        run: |
+          pyinstaller --noconfirm --clean --onefile --name cvecli --add-data "VERSION;." cve_search_cli.py
+
+      - name: Create portable zip
+        shell: pwsh
+        run: |
+          New-Item -ItemType Directory -Force -Path dist_pkg | Out-Null
+          Copy-Item dist\cvecli.exe dist_pkg\
+          Copy-Item LICENSE dist_pkg\
+          Copy-Item README.md dist_pkg\
+          $zip = "cvecli-${{ steps.version.outputs.version }}-windows-x64.zip"
+          if (Test-Path $zip) { Remove-Item -Force $zip }
+          Compress-Archive -Path dist_pkg\* -DestinationPath $zip
+
+      - name: Create SHA256SUMS
+        shell: pwsh
+        run: |
+          $zip = "cvecli-${{ steps.version.outputs.version }}-windows-x64.zip"
+          $exe = "dist\\cvecli.exe"
+          $zipHash = (Get-FileHash -Algorithm SHA256 -Path $zip).Hash.ToLower()
+          $exeHash = (Get-FileHash -Algorithm SHA256 -Path $exe).Hash.ToLower()
+          "${exeHash}  cvecli.exe" | Out-File -Encoding ascii -NoNewline SHA256SUMS.txt
+          "`n${zipHash}  ${zip}" | Out-File -Encoding ascii -Append SHA256SUMS.txt
+
+      - name: Publish GitHub Release assets
+        uses: softprops/action-gh-release@v2
+        with:
+          files: |
+            dist/cvecli.exe
+            cvecli-${{ steps.version.outputs.version }}-windows-x64.zip
+            SHA256SUMS.txt

cve_search_cli.py

@@ -40,6 +40,22 @@ def get_version() -> str:
     if version:
         return version
 
+    candidate_dirs: list[Path] = []
+    meipass = getattr(sys, "_MEIPASS", None)
+    if meipass:
+        candidate_dirs.append(Path(meipass))
+    candidate_dirs.append(Path(__file__).resolve().parent)
+
+    for directory in candidate_dirs:
+        try:
+            version_file = directory / "VERSION"
+            if version_file.is_file():
+                file_version = version_file.read_text(encoding="utf-8").strip()
+                if file_version:
+                    return file_version
+        except Exception:
+            pass
+
     try:
         script_dir = Path(__file__).resolve().parent
         result = subprocess.run(