feat: use gh for auth

Author: marcelkottmann

.github/workflows/release-codon.yaml

@@ -54,26 +54,27 @@ jobs:
         uses: docker/build-push-action@v5
         with:
           context: release
+          secrets: |
+            "github_token=${{ secrets.GH_TOKEN }}"
           file: release/codon/Dockerfile
           push: true
-          load: true
           build-args: |
             VERSION=${{ env.VERSION }}
           tags: "${{ env.IMAGE_BASE }}:${{ env.VERSION }}"
           cache-from: type=registry,ref=ghcr.io/marcelkottmann/armembeddon/tools-base-codon:buildcache
           cache-to: type=registry,ref=ghcr.io/marcelkottmann/armembeddon/tools-base-codon:buildcache,mode=max        
 
-      - name: Extract Build Artifacts to Host
-        # Use docker run with --rm (auto-cleanup) and a volume mount (-v)
-        run: |
-          docker run --rm \
-            -v ${{ github.workspace }}/artifact-mount:/release \
-            ${{ env.IMAGE_BASE }}:${{ env.VERSION }} \
-            sh -c "cp armembeddon.tar.gz /release/"
+      # - name: Extract Build Artifacts to Host
+      #   # Use docker run with --rm (auto-cleanup) and a volume mount (-v)
+      #   run: |
+      #     docker run --rm \
+      #       -v ${{ github.workspace }}/artifact-mount:/release \
+      #       ${{ env.IMAGE_BASE }}:${{ env.VERSION }} \
+      #       sh -c "cp armembeddon.tar.gz /release/"
 
-      - name: Upload Artifacts
-        uses: actions/upload-artifact@v4
-        with:
-          name: codon-build-artifacts-${{ env.VERSION }}
-          path: ${{ github.workspace }}/artifact-mount/
-          retention-days: 7
+      # - name: Upload Artifacts
+      #   uses: actions/upload-artifact@v4
+      #   with:
+      #     name: codon-build-artifacts-${{ env.VERSION }}
+      #     path: ${{ github.workspace }}/artifact-mount/
+      #     retention-days: 7

pr.sh

@@ -0,0 +1,3 @@
+#!/bin/bash
+
+gh api user

release/codon/Dockerfile

@@ -21,5 +21,16 @@ RUN cd codon && cmake -S . -B build \
 RUN cd codon && cmake --build build --config Release
 RUN cd codon && cmake --install build --prefix=install
 
+# install gh cli
+RUN (type -p wget >/dev/null || (apt update && apt install wget -y)) \
+	&& mkdir -p -m 755 /etc/apt/keyrings \
+	&& out=$(mktemp) && wget -nv -O$out https://cli.github.com/packages/githubcli-archive-keyring.gpg \
+	&& cat $out | tee /etc/apt/keyrings/githubcli-archive-keyring.gpg > /dev/null \
+	&& chmod go+r /etc/apt/keyrings/githubcli-archive-keyring.gpg \
+	&& mkdir -p -m 755 /etc/apt/sources.list.d \
+	&& echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" | tee /etc/apt/sources.list.d/github-cli.list > /dev/null \
+	&& apt update \
+	&& apt install gh -y
+
 COPY codon/pack.sh pack.sh
-RUN chmod +x pack.sh && ./pack.sh
+RUN --mount=type=secret,id=github_token GH_TOKEN=$(cat /run/secrets/github_token) ./pack.sh

release/codon/pack.sh

@@ -11,4 +11,7 @@ cp llvm-project/install/bin/llvm-objcopy release/armembeddon/bin/llvm-objcopy
 cp codon/install/bin/codon release/armembeddon/bin/codon
 cp -r codon/install/lib/codon/ release/armembeddon/lib/
 
-tar cvzf armembeddon.tar.gz -C release armembeddon
+tar cvzf armembeddon.tar.gz -C release armembeddon
+
+gh --version
+gh api user