Skip to content

Add GitHub Packages Maven publishing workflow #7

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
antspriggs merged 4 commits into from
Apr 7, 2026
Merged

Add GitHub Packages Maven publishing workflow #7

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
b448677
Address pre-release security audit findings (all Critical + High)
antspriggs Mar 27, 2026
fed48ec
Add GitHub Packages Maven publishing workflow
antspriggs Apr 7, 2026
97bddb0
Resolve merge with master: adopt release.yml publishing approach
antspriggs Apr 7, 2026
79b6c9f
Rename artifactId to android-auth-sample-code
antspriggs Apr 7, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 9 additions & 9 deletions .github/workflows/release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -82,15 +82,15 @@ jobs:
uses: actions/attest-build-provenance@v3
id: maven-attest
with:
subject-path: ~/.m2/repository/me/id/auth/idme-auth-sample/${{ env.RELEASE_VERSION }}/*
subject-path: ~/.m2/repository/me/id/auth/android-auth-sample-code/${{ env.RELEASE_VERSION }}/*

- name: Save attestation bundle alongside Maven artifacts
run: |
ATTESTATION_BUNDLE_PATH="${{ steps.maven-attest.outputs.bundle-path }}"
MAVEN_DIR=~/.m2/repository/me/id/auth/idme-auth-sample/$RELEASE_VERSION
MAVEN_DIR=~/.m2/repository/me/id/auth/android-auth-sample-code/$RELEASE_VERSION
if [[ -f "$ATTESTATION_BUNDLE_PATH" ]]; then
cp "$ATTESTATION_BUNDLE_PATH" "$MAVEN_DIR/idme-auth-sample-${RELEASE_VERSION}.intoto.jsonl"
echo "Saved attestation bundle as idme-auth-sample-${RELEASE_VERSION}.intoto.jsonl"
cp "$ATTESTATION_BUNDLE_PATH" "$MAVEN_DIR/android-auth-sample-code-${RELEASE_VERSION}.intoto.jsonl"
echo "Saved attestation bundle as android-auth-sample-code-${RELEASE_VERSION}.intoto.jsonl"
fi

# --- Publish Maven artifacts + attestation to GitHub Packages ---
Expand All @@ -99,7 +99,7 @@ jobs:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: |
GROUP_ID="me.id.auth"
ARTIFACT_ID="idme-auth-sample"
ARTIFACT_ID="android-auth-sample-code"
VERSION="$RELEASE_VERSION"
GROUP_PATH=$(echo "$GROUP_ID" | tr '.' '/')
GITHUB_URL="https://maven.pkg.github.com/IDme/android-auth-sample-code"
Expand Down Expand Up @@ -171,10 +171,10 @@ jobs:
continue-on-error: true
run: |
echo "Maven artifacts in local repository:"
ls -la ~/.m2/repository/me/id/auth/idme-auth-sample/$RELEASE_VERSION/
ls -la ~/.m2/repository/me/id/auth/android-auth-sample-code/$RELEASE_VERSION/
echo ""
echo "Generated POM content:"
cat ~/.m2/repository/me/id/auth/idme-auth-sample/$RELEASE_VERSION/idme-auth-sample-$RELEASE_VERSION.pom
cat ~/.m2/repository/me/id/auth/android-auth-sample-code/$RELEASE_VERSION/android-auth-sample-code-$RELEASE_VERSION.pom

- name: Create Git tag
run: |
Expand Down Expand Up @@ -206,9 +206,9 @@ jobs:
echo "- **Draft:** ${{ inputs.draft }}" >> $GITHUB_STEP_SUMMARY
echo "" >> $GITHUB_STEP_SUMMARY
echo "### Maven Coordinates" >> $GITHUB_STEP_SUMMARY
echo "\`me.id.auth:idme-auth-sample:$RELEASE_VERSION\`" >> $GITHUB_STEP_SUMMARY
echo "\`me.id.auth:android-auth-sample-code:$RELEASE_VERSION\`" >> $GITHUB_STEP_SUMMARY
echo "" >> $GITHUB_STEP_SUMMARY
echo "### Verification" >> $GITHUB_STEP_SUMMARY
echo "\`\`\`bash" >> $GITHUB_STEP_SUMMARY
echo "gh attestation verify idme-auth-sample-$RELEASE_VERSION.aar --repo IDme/android-auth-sample-code" >> $GITHUB_STEP_SUMMARY
echo "gh attestation verify android-auth-sample-code-$RELEASE_VERSION.aar --repo IDme/android-auth-sample-code" >> $GITHUB_STEP_SUMMARY
echo "\`\`\`" >> $GITHUB_STEP_SUMMARY
2 changes: 1 addition & 1 deletion .github/workflows/secure-pipeline-ast.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,5 +14,5 @@ on:

jobs:
execute:
uses: IDme/workflow-library/.github/workflows/secure-pipeline-ast.yml@master
uses: IDme/workflow-library/.github/workflows/secure-pipeline-ast.yml@7a259bb101fd4f20d7cd0137c1f99e8d60af0859
secrets: inherit
2 changes: 1 addition & 1 deletion sdk/build.gradle.kts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -64,7 +64,7 @@ afterEvaluate {
publications {
register("release", MavenPublication::class) {
groupId = "me.id.auth"
artifactId = "idme-auth-sample"
artifactId = "android-auth-sample-code"
version = project.version.toString()

from(components["release"])
Expand Down
Loading