release.yml

name: release
on:
  push:
    tags:
      - '*'

env:
  IMAGE_NAME: ${{ github.event.repository.name }}

jobs:
  build-gradle:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - uses: actions/setup-java@v3
        with:
          distribution: temurin
          java-version: 19
      - name: Setup Gradle
        uses: gradle/gradle-build-action@v2.6.0
      - name: Execute Gradle build
        run: ./gradlew -PprojectVersion=${{ github.ref_name }} test assemble installDist
      - name: Archive binaries
        uses: actions/upload-artifact@v3
        with:
          name: binaries
          path: build/install
          retention-days: 1
      - name: Archive distribution
        uses: actions/upload-artifact@v3
        with:
          name: distribution
          path: build/distributions
          retention-days: 1
  build-push-docker:
    runs-on: ubuntu-latest
    needs: build-gradle
    steps:
      - name: Checkout
        uses: actions/checkout@v3

      - name: Login to GitHub Container Registry
        uses: docker/login-action@v2
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - name: Set up Docker Buildx
        id: buildx
        uses: docker/setup-buildx-action@v2
      - name: Set up cosign
        uses: sigstore/cosign-installer@main

      - name: Download binaries
        uses: actions/download-artifact@v3
        with:
          name: binaries
          path: build/install
      - name: Download distribution
        uses: actions/download-artifact@v3
        with:
          name: distribution
          path: build/distributions

      - name: Build and publish container image
        uses: docker/build-push-action@v4
        id: build_push
        with:
          push: true
          builder: ${{ steps.buildx.outputs.name }}
          context: .
          file: ./Dockerfile
          platforms: linux/amd64,linux/arm64/v8
          tags: |
            ghcr.io/avisi-cloud/${{ env.IMAGE_NAME }}:${{ github.ref_name }}
            ghcr.io/avisi-cloud/${{ env.IMAGE_NAME }}:latest
          labels: |
            org.opencontainers.image.title=${{ github.event.repository.name }}
            org.opencontainers.image.description=${{ github.event.repository.description }}
            org.opencontainers.image.url=${{ github.event.repository.html_url }}
            org.opencontainers.image.source=${{ github.event.repository.html_url }}
            org.opencontainers.image.revision=${{ github.sha }}
            org.opencontainers.image.version=${{ github.ref_name }}
      - name: sign container image
        run: |
          cosign sign --yes --key env://COSIGN_KEY ghcr.io/avisi-cloud/${{ env.IMAGE_NAME }}:${{ github.ref_name }}@${{ steps.build_push.outputs.digest }}
        shell: bash
        env:
          COSIGN_KEY: ${{secrets.COSIGN_KEY}}
          COSIGN_PASSWORD: ${{secrets.COSIGN_PASSWORD}}

      - name: Check images
        run: |
          docker buildx imagetools inspect ghcr.io/avisi-cloud/${IMAGE_NAME}:${{ github.ref_name }}
          docker pull ghcr.io/avisi-cloud/${IMAGE_NAME}:${{ github.ref_name }}
          cosign verify --key cosign.pub ghcr.io/avisi-cloud/${IMAGE_NAME}:${{ github.ref_name }}
      - uses: anchore/sbom-action@v0
        with:
          image: ghcr.io/avisi-cloud/${{ env.IMAGE_NAME }}:${{ github.ref_name }}

  create-draft-release:
    runs-on: ubuntu-latest
    needs: build-gradle
    steps:
      - name: Checkout
        uses: actions/checkout@v3

      - name: Download distribution
        uses: actions/download-artifact@v3
        with:
          name: distribution
          path: build/distributions

      - name: Create Draft Release
        id: create_release
        uses: actions/create-release@v1
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          tag_name: ${{ github.ref_name }}
          release_name: v${{ github.ref_name }}
          draft: true
          prerelease: false
      - uses: actions/upload-release-asset@v1.0.2
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          upload_url: ${{ steps.create_release.outputs.upload_url }}
          asset_path: ./build/distributions/structurizr-site-generatr-${{ github.ref_name }}.tar.gz
          asset_name: structurizr-site-generatr-${{ github.ref_name }}.tar.gz
          asset_content_type: application/x-tar
      - uses: actions/upload-release-asset@v1.0.2
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          upload_url: ${{ steps.create_release.outputs.upload_url }}
          asset_path: ./build/distributions/structurizr-site-generatr-${{ github.ref_name }}.zip
          asset_name: structurizr-site-generatr-${{ github.ref_name }}.zip
          asset_content_type: application/zip

  publish-example-site:
    runs-on: ubuntu-latest
    needs: build-gradle
    steps:
      - name: Checkout
        uses: actions/checkout@v3
      - uses: actions/setup-java@v3
        with:
          distribution: temurin
          java-version: 19

      - name: Download binaries
        uses: actions/download-artifact@v3
        with:
          name: binaries
          path: build/install

      - name: Set up environment
        run: |
          sudo apt-get install -y graphviz
          chmod +x build/install/structurizr-site-generatr/bin/structurizr-site-generatr

      - name: Generate example site
        run: >
          build/install/structurizr-site-generatr/bin/structurizr-site-generatr generate-site
          --git-url https://github.com/avisi-cloud/structurizr-site-generatr.git
          --workspace-file docs/example/workspace.dsl
          --assets-dir docs/example/assets
          --branches main
          --default-branch main
          --version ${{ github.ref_name }}

      - name: Publish example site
        uses: peaceiris/actions-gh-pages@v3
        with:
          github_token: ${{ secrets.GITHUB_TOKEN }}
          publish_dir: ./build/site