jodosjodos
39f03add71
- Introduced core files including Dockerfile, action.yml, and entry point script (bin/polinrider.js) for the PolinRider malware scanner. - Created configuration files: .env.example, .gitignore, and .npmrc for environment setup and dependency management. - Added CI workflows for testing, building, and releasing the action, along with examples for usage in GitHub Actions. - Implemented a README.md to provide documentation on usage, features, and setup instructions. - Included necessary scripts for building the action and handling security measures during execution. - Established a structured directory for reports and workspace management within Docker. - Ensured all files are set up for a secure and efficient scanning process of GitHub repositories for PolinRider malware.
51 lines
1.3 KiB
YAML
51 lines
1.3 KiB
YAML
name: Release
|
|
|
|
# Tag a release (e.g. `git tag v1.2.0 && git push --tags`) to:
|
|
# 1. verify the committed bundle is fresh,
|
|
# 2. create a GitHub Release, and
|
|
# 3. move the major tag (e.g. v1) to this commit so consumers can pin `@v1`.
|
|
|
|
on:
|
|
push:
|
|
tags:
|
|
- "v*.*.*"
|
|
|
|
permissions:
|
|
contents: write
|
|
|
|
jobs:
|
|
release:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0
|
|
- uses: actions/setup-node@v4
|
|
with:
|
|
node-version: 24
|
|
- run: npm ci
|
|
|
|
- name: Tests
|
|
run: npm test
|
|
|
|
- name: Verify committed bundle is fresh
|
|
run: |
|
|
npm run build:action
|
|
if ! git diff --quiet -- dist/; then
|
|
echo "::error::dist/ does not match src/. Build and commit dist/ before tagging."
|
|
exit 1
|
|
fi
|
|
|
|
- name: Create GitHub Release
|
|
env:
|
|
GH_TOKEN: ${{ github.token }}
|
|
run: gh release create "$GITHUB_REF_NAME" --title "$GITHUB_REF_NAME" --generate-notes
|
|
|
|
- name: Move major tag (vN → this commit)
|
|
run: |
|
|
MAJOR="${GITHUB_REF_NAME%%.*}" # v1.2.0 -> v1
|
|
git config user.name "github-actions[bot]"
|
|
git config user.email "github-actions[bot]@users.noreply.github.com"
|
|
git tag -f "$MAJOR"
|
|
git push -f origin "refs/tags/$MAJOR"
|