Vitess v24.0.2 #159
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # This creates a {tar.gz,deb,rpm} file and uploads it to a release. | |
| # To trigger this, create a new release.. but make sure that you publish | |
| # it immediately and do not save it as a DRAFT. | |
| name: Release | |
| permissions: read-all | |
| on: | |
| release: | |
| types: [created] | |
| jobs: | |
| build: | |
| name: Create Release | |
| permissions: | |
| contents: write | |
| actions: read | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - name: Harden the runner (Audit all outbound calls) | |
| uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0 | |
| with: | |
| egress-policy: audit | |
| - name: Check out code | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| persist-credentials: 'false' | |
| - name: Set up Go | |
| uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 | |
| with: | |
| go-version-file: go.mod | |
| cache: 'false' | |
| - name: Tune the OS | |
| uses: ./.github/actions/tune-os | |
| - name: Get dependencies | |
| run: | | |
| sudo apt-get update | |
| sudo apt-get install -y make ruby ruby-dev | |
| go mod download | |
| # We use fpm to package our artifacts, we want to pin the version we use and | |
| # ensure the checksum of the package matches the one published on the package's webpage. | |
| # https://rubygems.org/gems/fpm/versions | |
| - name: Get fpm | |
| run: | | |
| FPM_VERSION=1.16.0 | |
| gem fetch fpm -v $FPM_VERSION | |
| # Reviewers: The expected checksum MUST ALWAYS match the one published on this website: | |
| # https://rubygems.org/gems/fpm/versions | |
| EXPECTED_CHECKSUM="d9eafe613cfbdf9d3b8ef2e321e194cd0a2d300ce37f716c0be1b3a42b7db5df" | |
| GOT_CHECKSUM=$(sha256sum fpm-$FPM_VERSION.gem | awk '{print $1}') | |
| if [[ "$GOT_CHECKSUM" != "$EXPECTED_CHECKSUM" ]]; then | |
| echo "Checksum validation failed" | |
| echo "Expected: $EXPECTED_CHECKSUM" | |
| echo "Got: $GOT_CHECKSUM" | |
| exit 1 | |
| fi | |
| sudo gem install fpm-$FPM_VERSION.gem | |
| - name: Make Packages | |
| run: | | |
| ./tools/make-release-packages.sh | |
| - name: Upload Files | |
| uses: csexton/release-asset-action@3567794e918fa3068116688122a76cdeb57b5f09 # v3.0.0 | |
| with: | |
| github-token: ${{ secrets.GITHUB_TOKEN }} | |
| pattern: "releases/*.{tar.gz,rpm,deb}" |