Updates CI process (#91)

.mint/continuous_integration.yml

@@ -1,11 +1,23 @@
+on:
+  github:
+    push:
+      init:
+        commit-sha: ${{ event.git.sha }}
+        ref: ${{ event.git.ref }}
+
+concurrency-pools:
+  - id: rwx-research/mint-cli:pr-${{ init.ref }}
+    capacity: 1
+    on-overflow: cancel-running
+
 tasks:
   - key: code
     call: mint/git-clone 1.2.4
     with:
-      preserve-git-dir: "true"
-      repository: git@github.com:rwx-research/mint-cli.git
-      ref: ${{ init.commit }}
-      ssh-key: ${{ secrets.CHECKOUT_SSH_KEY_MINT_CLI_REPO }}
+      preserve-git-dir: true
+      repository: https://github.com/rwx-research/mint-cli.git
+      ref: ${{ init.commit-sha }}
+      github-access-token: ${{ github.token }}
 
   - key: tool-versions
     use: code
@@ -35,18 +47,18 @@ tasks:
     use: go-deps
     run: |
       CGO_ENABLED=0 \
-      LDFLAGS="-w -s -X github.com/rwx-research/mint-cli/cmd/mint/config.Version=testing-${{ init.commit }}" \
+      LDFLAGS="-w -s -X github.com/rwx-research/mint-cli/cmd/mint/config.Version=testing-${{ init.commit-sha }}" \
       go run ./tools/mage test
 
-  - key: build-mint-cli
+  - key: mint-cli
     use: go-deps
     run: |
       CGO_ENABLED=0 \
-        LDFLAGS="-w -s -X github.com/rwx-research/mint-cli/cmd/mint/config.Version=testing-${{ init.commit }}" \
+        LDFLAGS="-w -s -X github.com/rwx-research/mint-cli/cmd/mint/config.Version=testing-${{ init.commit-sha }}" \
         go run ./tools/mage build
 
   - key: integration-tests
-    use: build-mint-cli
+    use: mint-cli
     run: ./mint run --debug -f test/hello-world.mint.yaml
     env:
       RWX_ACCESS_TOKEN: ${{ secrets.RWX_ACCESS_TOKEN }}
@@ -61,24 +73,24 @@ tasks:
       go mod tidy
       git diff --exit-code
 
-  - key: checkout-mint-testing
+  - key: mint-testing-code
     call: mint/git-clone 1.2.4
     with:
       path: ./mint-testing
       repository: https://github.com/rwx-research/mint-testing.git
       ref: main
       github-access-token: ${{ github.token }}
 
-  - key: install-jq
+  - key: jq
     run: |
       sudo apt-get update
       sudo apt-get install jq
       sudo apt-get clean
 
   - key: run-mint-testing-tests
-    use: [checkout-mint-testing, install-jq, build-mint-cli]
+    use: [mint-testing-code, jq, mint-cli]
     run: |
-      initiate_run_result=$(./mint run --json --file ./mint-testing/.mint/trigger-integration-test.yml --init 'grep=@cli' --init ref=main --init cli=${{ init.commit }})
+      initiate_run_result=$(./mint run --json --file ./mint-testing/.mint/trigger-integration-test.yml --init 'grep=@cli' --init ref=main --init cli=${{ init.commit-sha }})
       echo "${initiate_run_result}"
       run_id=$(echo "${initiate_run_result}" | jq -r ".RunId")
 

.mint/main.yml

@@ -16,11 +16,6 @@ tasks:
     init:
       commit: ${{ init.commit-sha }}
 
-  - key: bigtest
-    call: ${{ run.mint-dir }}/bigtest.yml
-    init:
-      commit-sha: ${{ init.commit-sha }}
-
   - key: release-unstable
     after: [ci, bigtest]
     call: ${{ run.mint-dir }}/release.yml

.mint/release.yml

@@ -52,10 +52,10 @@ tasks:
     call: mint/git-clone 1.2.4
     after: verify-inputs
     with:
-      preserve-git-dir: "true"
-      repository: git@github.com:rwx-research/mint-cli.git
+      preserve-git-dir: true
+      repository: https://github.com/rwx-research/mint-cli.git
       ref: ${{ init.commit }}
-      ssh-key: ${{ secrets.CHECKOUT_SSH_KEY_MINT_CLI_REPO }}
+      github-access-token: ${{ vaults.default.github-apps.rwx-bot.token }}
 
   - key: go-deps
     use: [go, code]
@@ -64,7 +64,7 @@ tasks:
       - go.mod
       - go.sum
 
-  - key: install-gh-cli
+  - key: gh-cli
     run: |
       curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg | sudo dd of=/usr/share/keyrings/githubcli-archive-keyring.gpg \
       && sudo chmod go+r /usr/share/keyrings/githubcli-archive-keyring.gpg \
@@ -73,7 +73,7 @@ tasks:
       && sudo apt-get install gh
 
   - key: ensure-release-not-published
-    use: [install-gh-cli, code]
+    use: [gh-cli, code]
     run: |
       release_not_published=$(gh release view ${{ tasks.extract-version-details.values.full-version }} \
         --json isDraft \
@@ -84,10 +84,11 @@ tasks:
         exit 1
       fi
     env:
-      GH_TOKEN: ${{ secrets.MINT_CLI_REPO_GH_TOKEN }}
+      GITHUB_TOKEN: ${{ vaults.default.github-apps.rwx-bot.token }}
+      GH_TOKEN: ${{ vaults.default.github-apps.rwx-bot.token }}
 
   - key: draft-full-version-release
-    use: [install-gh-cli, code]
+    use: [gh-cli, code]
     after: [extract-version-details, ensure-release-not-published]
     run: |
       full_version="${{ tasks.extract-version-details.values.full-version }}"
@@ -101,22 +102,22 @@ tasks:
         --generate-notes \
         --title "Mint CLI ${full_version}"
     env:
-      GH_TOKEN: ${{ secrets.MINT_CLI_REPO_GH_TOKEN }}
-      GIT_SSH_KEY: ${{ secrets.CHECKOUT_SSH_KEY_MINT_CLI_REPO }}
+      GITHUB_TOKEN: ${{ vaults.default.github-apps.rwx-bot.token }}
+      GH_TOKEN: ${{ vaults.default.github-apps.rwx-bot.token }}
 
-  - key: setup-codesigning
+  - key: codesigning
     run: |
       curl -fsSLO https://github.com/indygreg/apple-platform-rs/releases/download/apple-codesign%2F0.22.0/apple-codesign-0.22.0-x86_64-unknown-linux-musl.tar.gz
       tar xzvf apple-codesign-0.22.0-x86_64-unknown-linux-musl.tar.gz --strip-components=1
 
-  - key: install-zip
+  - key: zip
     run: |
       sudo apt-get update
       sudo apt-get install zip
       sudo apt-get clean
 
   - key: build-and-upload-binaries
-    use: [install-gh-cli, setup-codesigning, install-zip, code, go-deps]
+    use: [gh-cli, codesigning, zip, code, go-deps]
     after: [draft-full-version-release, extract-version-details]
     parallel:
       key: build-and-upload-${{ parallel.os }}-${{ parallel.arch }}-binaries
@@ -174,24 +175,26 @@ tasks:
       mv "mint$extension" "$github_asset_name"
       gh release upload ${{ tasks.extract-version-details.values.full-version }} "${github_asset_name}" --clobber
     env:
-      GH_TOKEN: ${{ secrets.MINT_CLI_REPO_GH_TOKEN }}
+      GITHUB_TOKEN: ${{ vaults.default.github-apps.rwx-bot.token }}
+      GH_TOKEN: ${{ vaults.default.github-apps.rwx-bot.token }}
       CODESIGN_VERSION: 0.22.0
       RWX_APPLE_DEVELOPER_ID_APPLICATION_CERT: "${{ secrets.RWX_APPLE_DEVELOPER_ID_APPLICATION_CERT_CERTIFICATE }}${{ secrets.RWX_APPLE_DEVELOPER_ID_APPLICATION_CERT_PRIVATE_KEY }}"
       RWX_APPLE_APP_STORE_CONNECT_API_KEY: ${{ secrets.RWX_APPLE_APP_STORE_CONNECT_API_KEY }}
 
   - key: publish-production-release
-    use: [install-gh-cli, code]
+    use: [gh-cli, code]
     after: [extract-version-details, build-and-upload-binaries]
     if: ${{ init.kind == "production" }}
     run: |
       gh release edit ${{ tasks.extract-version-details.values.full-version }} \
         --draft=false \
         --latest
     env:
-      GH_TOKEN: ${{ secrets.MINT_CLI_REPO_GH_TOKEN }}
+      GITHUB_TOKEN: ${{ vaults.default.github-apps.rwx-bot.token }}
+      GH_TOKEN: ${{ vaults.default.github-apps.rwx-bot.token }}
 
   - key: update-aliased-version-release
-    use: [install-gh-cli, code]
+    use: [gh-cli, code]
     after:
       - extract-version-details
       - ensure-release-not-published
@@ -215,5 +218,5 @@ tasks:
       gh release download ${{ tasks.extract-version-details.values.full-version }}
       gh release upload "${aliased_version}" mint-* --clobber
     env:
-      GH_TOKEN: ${{ secrets.MINT_CLI_REPO_GH_TOKEN }}
-      GIT_SSH_KEY: ${{ secrets.CHECKOUT_SSH_KEY_MINT_CLI_REPO }}
+      GITHUB_TOKEN: ${{ vaults.default.github-apps.rwx-bot.token }}
+      GH_TOKEN: ${{ vaults.default.github-apps.rwx-bot.token }}

README.md

@@ -1,12 +1,12 @@
-:globe_with_meridians: [rwx.com/mint](https://www.rwx.com/mint)  
-:bird: [@rwx_research](https://twitter.com/rwx_research)  
-:speech_balloon: [discord](https://discord.gg/h4ha5Cue7j)  
-:books: [documentation](https://www.rwx.com/docs/mint)
+🌐: [rwx.com/mint](https://www.rwx.com/mint)  
+✖️: [@rwx_research](https://twitter.com/rwx_research)  
+💬: [discord](https://discord.gg/h4ha5Cue7j)  
+📚: [documentation](https://www.rwx.com/docs/mint)
 
 Mint is a new language-agnostic build tool designed to
 substantially accelerate engineering feedback loops and lower CI costs.
 
-Mint is currently in closed beta. Learn more at [rwx.com/mint](https://www.rwx.com/mint).
+Learn more and sign up for Mint for free today at [rwx.com/mint](https://www.rwx.com/mint).
 
 ## Getting Started