From 8435420c95517c6e7a13593da9830838aa0687fc Mon Sep 17 00:00:00 2001
From: Jon Janzen <jonjanzen@fb.com>
Date: Tue, 18 Aug 2020 12:55:39 -0700
Subject: [PATCH] Add github action to auto-release TagIt tags

Summary:
This came from a [request from Fred Emmott](https://fb.workplace.com/groups/osssupport/permalink/4116491528399431/), but also is something we should do due to the GitHub UI redesign:

Nowadays on GitHub, tags are not shown in the sidebar (just the count) and instead GitHub Releases are prioritized and the most recent *release* is shown.

Secondly, the Source Code zip archives for tags/releases are created on-the-fly on GitHub. This can cause problems for downstream projects that need consistent content hashes of the archive for security/reproducability reasons. This action also creates its own archives (zip and tar.gz) and attaches them to the release.

Reviewed By: fredemmott

Differential Revision: D23167073

fbshipit-source-id: 463e9d93a2c4af260ac3c4dbc1ceab7894add714
---
 .github/workflows/TagIt.yml | 68 +++++++++++++++++++++++++++++++++++++
 1 file changed, 68 insertions(+)
 create mode 100644 .github/workflows/TagIt.yml

diff --git a/.github/workflows/TagIt.yml b/.github/workflows/TagIt.yml
new file mode 100644
index 00000000..2c4b889d
--- /dev/null
+++ b/.github/workflows/TagIt.yml
@@ -0,0 +1,68 @@
+on:
+  push:
+    tags:
+      # Only match TagIt tags, which always start with this prefix
+      - 'v20*'
+
+name: TagIt
+
+jobs:
+  build:
+    name: Release
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v2
+      - name: Archive project
+        id: archive_project
+        run: |
+          FILE_NAME=${GITHUB_REPOSITORY#*/}-${GITHUB_REF##*/}
+          git archive ${{ github.ref }} -o ${FILE_NAME}.zip
+          git archive ${{ github.ref }} -o ${FILE_NAME}.tar.gz
+          echo "::set-output name=file_name::${FILE_NAME}"
+      - name: Compute digests
+        id: compute_digests
+        run: |
+          echo "::set-output name=tgz_256::$(openssl dgst -sha256 ${{ steps.archive_project.outputs.file_name }}.tar.gz)"
+          echo "::set-output name=tgz_512::$(openssl dgst -sha512 ${{ steps.archive_project.outputs.file_name }}.tar.gz)"
+          echo "::set-output name=zip_256::$(openssl dgst -sha256 ${{ steps.archive_project.outputs.file_name }}.zip)"
+          echo "::set-output name=zip_512::$(openssl dgst -sha512 ${{ steps.archive_project.outputs.file_name }}.zip)"
+      - name: Create Release
+        id: create_release
+        uses: actions/create-release@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          tag_name: ${{ github.ref }}
+          release_name: ${{ github.ref }}
+          body: |
+            Automated release from TagIt
+            <details>
+              <summary>File Hashes</summary>
+              <ul>
+                <li>${{ steps.compute_digests.outputs.zip_256 }}</li>
+                <li>${{ steps.compute_digests.outputs.zip_512 }}</li>
+                <li>${{ steps.compute_digests.outputs.tgz_256 }}</li>
+                <li>${{ steps.compute_digests.outputs.tgz_512 }}</li>
+              </ul>
+            </details>
+          draft: false
+          prerelease: false
+      - name: Upload zip
+        uses: actions/upload-release-asset@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          upload_url: ${{ steps.create_release.outputs.upload_url }}
+          asset_path: ./${{ steps.archive_project.outputs.file_name }}.zip
+          asset_name: ${{ steps.archive_project.outputs.file_name }}.zip
+          asset_content_type: application/zip
+      - name: Upload tar.gz
+        uses: actions/upload-release-asset@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          upload_url: ${{ steps.create_release.outputs.upload_url }}
+          asset_path: ./${{ steps.archive_project.outputs.file_name }}.tar.gz
+          asset_name: ${{ steps.archive_project.outputs.file_name }}.tar.gz
+          asset_content_type: application/gzip