defectdojo-api-generated/.github/workflows/publish.yml at main · fopina/defectdojo-api-generated · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
name: publish

on:
  workflow_call:
    inputs:
      version:
        type: string
        required: true
      repository:
        default: pypi
        type: string
    secrets:
      twine_token:
        required: true
      CODECOV_TOKEN:
        required: false
  workflow_dispatch:
    inputs:
      version:
        description: 'Version to publish (for example: 1.2.3)'
        type: string
        required: true
      repository:
        description: 'Package index repository'
        type: choice
        options:
          - pypi
          - testpypi
        default: pypi

run-name: publish to ${{ inputs.repository }}

jobs:
  test:
    uses: ./.github/workflows/test.yml
    secrets:
      CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}

  publish:
    name: publish to ${{ inputs.repository }}
    runs-on: ubuntu-latest
    needs: test
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.10"

      - name: Install dependencies
        run: |
          pip install uv
          uv sync --dev
      - name: force right version
        run: |
          .github/change_version.py --set '${{ inputs.version }}'
      - name: Build
        run: |
          rm -rf dist packages/cli/dist
          uv run pyproject-build
          uv run pyproject-build packages/cli
      - name: Publish
        env:
          TWINE_USERNAME: __token__
          TWINE_PASSWORD: ${{ secrets.twine_token }}
        run: uv run twine upload --verbose --repository ${{ inputs.repository }} dist/* packages/cli/dist/*
      - name: highlight
        run: |
          INDEX=""
          if [ "${{ inputs.repository }}" != "pypi" ]; then
            INDEX=" -i ${{ inputs.repository }}"
          fi
          cat <<EOF >> ${GITHUB_STEP_SUMMARY}
          Packages uploaded to ${{ inputs.repository }}
          \`\`\`
          pip install${INDEX} defectdojo-api-generated==${{ inputs.version }}
          pip install${INDEX} defectdojo-cli==${{ inputs.version }}
          \`\`\`
          EOF
          if [ "${{ inputs.repository }}" != "pypi" ]; then
            cat <<EOF >> ${GITHUB_STEP_SUMMARY}
          Run with \`uvx\`
          \`\`\`
          uvx --with 'defectdojo-api-generated @ https://test-files.pythonhosted.org/packages/source/d/defectdojo-api-generated/defectdojo_api_generated-${{ inputs.version }}.tar.gz' \\
              'defectdojo-cli @ https://test-files.pythonhosted.org/packages/source/d/defectdojo-cli/defectdojo_cli-${{ inputs.version }}.tar.gz'
          \`\`\`
          EOF
          else
            cat <<EOF >> ${GITHUB_STEP_SUMMARY}
          Run with \`uvx\`
          \`\`\`
          uvx defectdojo-cli==${{ inputs.version }}
          \`\`\`
          EOF
          fi