release.yml

name: Release

on:
  workflow_dispatch:

env:
  CARGO_TERM_COLOR: always
  VERSION: 0.0.1

permissions:
  contents: write
  id-token: write
  attestations: write

jobs:
  build:
    strategy:
      matrix:
        os: [ubuntu-latest, windows-latest]
    runs-on: ${{ matrix.os }}

    steps:
      - uses: actions/checkout@v4

      - uses: actions-rs/toolchain@v1
        with:
          profile: minimal
          toolchain: stable

      - uses: Swatinem/rust-cache@v2

      - name: Build
        shell: bash
        run: cargo build --release

      - name: Upload artifact (windows)
        uses: actions/upload-artifact@v4
        if: startsWith(matrix.os, 'windows')
        with:
          name: artifact-windows
          path: ./target/release/dfint-installer.exe

      - name: Upload artifact (linux)
        uses: actions/upload-artifact@v4
        if: startsWith(matrix.os, 'ubuntu')
        with:
          name: artifact-linux
          path: ./target/release/dfint-installer

  release:
    needs: build
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v4

      - name: Restore files
        uses: actions/download-artifact@v4
        id: download
        with:
          pattern: artifact-*
          merge-multiple: true
          path: release

      - name: Fetch version from Cargo.toml
        run: echo VERSION=$(cat Cargo.toml | awk -F'"' '/^version/ {print $2}') >> $GITHUB_ENV

      - name: Package files
        run: |
          cd release/
          zip dfint-installer-win-${{ env.VERSION }}.zip dfint-installer.exe
          chmod +x dfint-installer
          tar -czf dfint-installer-lin-${{ env.VERSION }}.tar.gz dfint-installer

      - name: Attestation
        uses: actions/attest-build-provenance@v1
        with:
          subject-path: 'release/*'

      - name: Release
        uses: softprops/action-gh-release@v2
        with:
          files: |
            release/dfint-installer-win-${{ env.VERSION }}.zip
            release/dfint-installer-lin-${{ env.VERSION }}.tar.gz
          tag_name: ${{ env.VERSION }}
          draft: true

      - name: VirusTotal Scan
        uses: crazy-max/ghaction-virustotal@v4
        with:
          vt_api_key: ${{ secrets.VIRUSTOTAL_API_KEY }}
          files: |
            ./release/*