Foo

.github/workflows/hz.js

@@ -0,0 +1,40 @@
+
+// see https://github.com/actions/github-script
+// , core, glob, io, exec, require
+module.exports = function (github, context) {
+    
+    var module = {}
+    
+    // this is *not* exported
+    function noop ( ) { }
+
+    // this *is* exported
+    module.getReleaseByTag = async function (tag_name) {
+        var rel = null
+        try {
+            // this does *not* return draft releases, so we have to list them
+            //rel = await github.repos.getReleaseByTag({ ... })
+            const rels = await github.repos.listReleases({
+                owner: context.repo.owner,
+                repo: context.repo.repo
+            })
+            for (const r of rels.data) {
+                if (r.tag_name === tag_name) {
+                    rel = r
+                    break
+                }
+            }
+        }
+        catch (error) {
+            return null
+        }
+        return rel
+    }
+    
+    module.getRefReleaseTag = function (ref) {
+        // test, must start with 'refs/heads/release/' 19 chars
+        return "v" + ref.substring(19)
+    }
+    
+    return module;
+}

.github/workflows/publish-release.yml

@@ -1,23 +1,26 @@
-name: Publish Release
-on: workflow_dispatch
+name: Publish 
+
+#meh
+on: 
+  workflow_dispatch:
+    inputs:
+      confirm:
+        description: "This is really going to release. Enter \'yolo\' to confirm that you really want to do it."
+        required: true
+        default: ""
+        
 jobs:
   job:
     runs-on: ubuntu-latest
     if: startsWith(github.ref, 'refs/heads/release/')
     steps:
-    - name: Validate the release
+    
+    - name: Confirm
       uses: actions/github-script@v4
       with:
         script: |
-          console.log('X0')
-          const tag = "v" + "${{ github.ref }}".substring(19)
-          const rel = await github.repos.getReleaseByTag({
-            owner: context.repo.owner,
-            repo: context.repo.repo,
-            tag: tag
-          })
-          if (rel === null) {
-            core.setFailed("Could not find a release for tag " + tag)
+          if ("${{ github.event.inputs.confirm }}" != "yolo") {
+            core.setFailed(`Not confirmed (confirm = '${{ github.event.inputs.confirm }}').`)
           }
     
     - name: Checkout
@@ -25,27 +28,71 @@ jobs:
       with:
         token: ${{ secrets.GITHUB_TOKEN }}
         
+    - name: Validate the release
+      uses: actions/github-script@v4
+      with:
+      
+        # token needed to see draft releases when getting all releases
+        github-token: ${{ secrets.MY_GITHUB_TOKEN_TESTREPO }}
+        script: |
+          const hz = require("./.github/workflows/hz.js")(github, context)
+          const ref = "${{ github.ref }}"
+          const tag = hz.getRefReleaseTag(ref)
+          if (tag === null) {
+            core.setFailed(`Invalid reference ${ref} is not release/<version>.`)
+            return
+          }
+          var rel = await hz.getReleaseByTag(tag)
+          if (rel === null) {
+            core.setFailed(`Could not find a release for tag ${tag}.`)
+            return
+          }
+          if (!rel.draft) {
+            core.setFailed(`Release for tag ${tag} is already published.`)
+            return
+          }
+          try {
+            const ref = await github.git.getRef({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              ref: 'tags/' + tag
+            })
+            core.setFailed(`Tag ${tag} already exists.`)
+            return
+          }
+          catch (error) {
+            // this is expected
+          }
+          // everything is OK
+          
+    - name: Configure repository
+      shell: bash
+      run: |
+        git config user.email "github-actions@hazelcast.com"
+        git config user.name "GitHub Actions (Build Release)"
+
     - name: Finalize the release
       run: |
-        version="${{ github.ref }}"
-        version="${version:19}" # trim starting 'refs/heads/release/' (19 chars)
-        echo "Tag ref ${{ github.ref }} as v$version"
+        ref="${{ github.ref }}"
+        branch="${ref:11}" # trim starting 'refs/heads/' (11 chars)
+        version="${ref:19}" # trim starting 'refs/heads/release/' (19 chars)
+        echo "Tag branch $branch as v$version"
         git tag v$version
-        git config user.email "github-actions@zpqrtbnk.net"
-        git config user.name "GitHub Actions (Do Something)"
         git push --tags
-        git push :${{ github.ref }}
+        #git push :$branch
 
     - name: Publish the release
       uses: actions/github-script@v4
       with:
         script: |
-          const tag = "v" + "${{ github.ref }}".substring(19)
-          const rel = await github.repos.getReleaseByTag({
-            owner: context.repo.owner,
-            repo: context.repo.repo,
-            tag: tag
-          })
+          const hz = require("./.github/workflows/hz.js")(github, context)
+          const ref = "${{ github.ref }}"
+          const tag = hz.getRefReleaseTag(ref)
+          if (tag === null) {
+            core.setFailed(`Invalid reference ${ref} is not release/<version>.`)
+            return
+          }
+          var rel = await hz.getReleaseByTag(tag)
           await github.repos.updateRelease({
             owner: context.repo.owner,
             repo: context.repo.repo,

foo.txt

@@ -1 +1,2 @@
 foo
+foo

pii.txt

@@ -0,0 +1 @@
+pii