ci: Fix package publishing (#10)

skarllot · Dec 26, 2024 · 24b5ca8 · 24b5ca8
1 parent 36f8889
commit 24b5ca8
Showing 1 changed file with 28 additions and 0 deletions.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -74,6 +74,34 @@ jobs:
           dotnet publish -r ${{ matrix.runtime }} -c Release
           7z a -tzip -mx9 flowpair-${{ matrix.runtime }}-${{ github.ref_name }}.zip $PWD/publish/*.*
 
+      - name: 📤 Upload artifact
+        uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
+        with:
+          name: release-${{ matrix.runtime }}-${{ github.ref_name }}
+          path: flowpair-*.zip
+          retention-days: 1
+          overwrite: true
+
+  publish:
+    runs-on: ubuntu-latest
+    needs: pack
+
+    steps:
+      - name: 🛡️ Harden Runner
+        uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
+        with:
+          disable-sudo: true
+          egress-policy: block
+          allowed-endpoints: >
+            api.github.com:443
+            github.com:443
+
+      - name: 📥 Download artifact
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
+        with:
+          pattern: release-*-${{ github.ref_name }}
+          merge-multiple: true
+
       - name: 🚀 Publish
         uses: softprops/action-gh-release@e7a8f85e1c67a31e6ed99a94b41bd0b71bbee6b8 # v2
         if: startsWith(github.ref, 'refs/tags/')