release.yml

name: release

on:
  release:
    types: [published]

permissions:
  contents: read

env:
  TARGET_PLATFORM: "linux/amd64,linux/arm/v7,linux/arm64"

jobs:
  sdk-publish:
    # This job publishes the package to PyPI
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: ./sdk
    steps:
    - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 #v5.1.0
    - name: Set up Python 3.10
      uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v7
      with:
        python-version: "3.10"
    - name: Install dependencies
      run: |
        python -m pip install --upgrade pip
        pip install build
    - name: Create source and wheel dist
      # (2024-12-11, s-heppner)
      # The PyPI Action expects the dist files in a toplevel `/dist` directory,
      # so we have to specify this as output directory here.
      run: |
        python -m build --outdir ../dist
    - name: Publish distribution to PyPI
      uses: pypa/gh-action-pypi-publish@release/v1
      with:
        password: ${{ secrets.PYPI_ORG_TOKEN }}

  compliance-tool-publish:
    # This job publishes the compliance_tool package to PyPI
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: ./compliance_tool
    steps:
      - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 #v5.1.0
      - name: Set up Python 3.10
        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v7
        with:
          python-version: "3.10"
      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip
          pip install build
      - name: Create source and wheel dist
        # (2024-12-11, s-heppner)
        # The PyPI Action expects the dist files in a toplevel `/dist` directory,
        # so we have to specify this as output directory here.
        run: |
          python -m build --outdir ../dist
      - name: Publish distribution to PyPI
        uses: pypa/gh-action-pypi-publish@release/v1
        with:
          password: ${{ secrets.PYPI_ORG_TOKEN }}

  server-publish:
    # This job publishes multi-platform docker images for all server profiles to DockerHub
    runs-on: ubuntu-latest
    strategy:
      matrix:
        profile: [ "repository", "discovery", "registry" ]
      fail-fast: true
    steps:
      - name: Checkout Repository
        uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 #v5.1.0

      - name: Log in to Docker Hub
        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 #v4.5.1
        with:
          username: ${{ secrets.DOCKER_HUB_USER }}
          password: ${{ secrets.DOCKER_HUB_TOKEN }}

      - name: Build and Push Docker Image
        uses: ./.github/actions/build-server
        with:
          server-profile: ${{ matrix.profile }}
          platform: ${{ env.TARGET_PLATFORM }}
          load: false
          publish: true