From decd379802a428e5de6763e758f2f2be96c7c5e6 Mon Sep 17 00:00:00 2001 From: pthierry Date: Thu, 12 Sep 2024 13:56:30 +0200 Subject: [PATCH 1/2] moving to reusable workflow --- .github/workflows/publish-to-jfrog.yml | 50 ++++++++------------------ 1 file changed, 14 insertions(+), 36 deletions(-) diff --git a/.github/workflows/publish-to-jfrog.yml b/.github/workflows/publish-to-jfrog.yml index aa86efc..544adef 100644 --- a/.github/workflows/publish-to-jfrog.yml +++ b/.github/workflows/publish-to-jfrog.yml @@ -5,44 +5,22 @@ name: Upload Python Package to jfrog on: - release: - types: [released] - workflow_dispatch: + push: + branches: + - main jobs: - deploy: - runs-on: outpost-os-shared-small - environment: ledger-publish - + pubhlish: permissions: id-token: write contents: read - - steps: - - name: Set up Python 3.10 - uses: actions/setup-python@v5 - with: - python-version: '3.10' - - name: Install build - run: | - pip install build - - name: Checkout code - uses: actions/checkout@v4 - - name: build package - run: python3 -m build . - - name: Login to JFrog Ledger - uses: LedgerHQ/actions-security/actions/jfrog-login@actions/jfrog-login-1 - - name: set jfrog Repo URL - run: jf pip-config --repo-resolve=${{ secrets.JFROG_PYPI_REPO_URL }} - - name: upload package - run: jf rt u dist/ --build-name=dts-util-devel --build-number=1 --module=dts-utils - - name: Attest - id: attest - uses: LedgerHQ/actions-security/actions/attest@actions/attest-1 - with: - subject-path: 'dist/*' - push-to-registry: true - - name: test install from jfrog - run: | - jf pip install dts-utils - pip show dts-utils + attestations: write + uses: outpost-os/pipeline-python/.github/workflows/publish.yml@main + with: + environment: ledger-publish + runner: outpost-os-shared-small + python-version: '3.10' + build-name: dts-utils-dev + module-name: dts-utils + repo-name: outpost-pypi-dev-green + virtual-repo-name: outpost-pypi-virtual-green From d276aa477b95318a859b5fd3d4e0bcb909d5e5e8 Mon Sep 17 00:00:00 2001 From: pthierry Date: Thu, 19 Sep 2024 16:52:44 +0200 Subject: [PATCH 2/2] ci: add releases push to corresponding jfrog repo --- .github/workflows/publish-to-jfrog.yml | 2 +- .github/workflows/release-to-jfrog.yml | 25 +++++++++++++++++++++++++ 2 files changed, 26 insertions(+), 1 deletion(-) create mode 100644 .github/workflows/release-to-jfrog.yml diff --git a/.github/workflows/publish-to-jfrog.yml b/.github/workflows/publish-to-jfrog.yml index 544adef..361ff81 100644 --- a/.github/workflows/publish-to-jfrog.yml +++ b/.github/workflows/publish-to-jfrog.yml @@ -10,7 +10,7 @@ on: - main jobs: - pubhlish: + publish: permissions: id-token: write contents: read diff --git a/.github/workflows/release-to-jfrog.yml b/.github/workflows/release-to-jfrog.yml new file mode 100644 index 0000000..d0d66ce --- /dev/null +++ b/.github/workflows/release-to-jfrog.yml @@ -0,0 +1,25 @@ +# SPDX-FileCopyrightText: 2024 Ledger SAS +# +# SPDX-License-Identifier: Apache-2.0 + +name: Upload Python Package to jfrog + +on: + release: + types: [released] + +jobs: + release: + permissions: + id-token: write + contents: read + attestations: write + uses: outpost-os/pipeline-python/.github/workflows/publish.yml@main + with: + environment: ledger-publish + runner: outpost-os-shared-small + python-version: '3.10' + build-name: dts-utils-dev + module-name: dts-utils + repo-name: outpost-pypi-prod-public + virtual-repo-name: outpost-pypi-virtual-green