feat: Create github-action #91

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged

macalbert merged 39 commits into main from feature/github-action-subfolder

Nov 16, 2025

.commitlintrc.json

-Original file line number
+Diff line change
@@ -0,0 +1,24 @@
+    {
+      "extends": ["@commitlint/config-conventional"],
+      "rules": {
+        "type-enum": [
+,
+          "always",
+          [
+            "feat",
+            "fix",
+            "docs",
+            "style",
+            "refactor",
+            "perf",
+            "test",
+            "chore",
+            "ci",
+            "build",
+            "revert"
+          ]
+        ],
+        "subject-case": [2, "never", ["upper-case"]],
+        "header-max-length": [2, "always", 100]
+      }
+    }

.github/dependabot.yml

-Original file line number
+Diff line change
@@ Expand Up / @@ -17,8 +17,6 @@ updates: @@
       labels:
       - "npm"
       - "dependencies"
-      reviewers:
-      - macalbert
       assignees:
       - macalbert
@@ Expand All / @@ -34,7 +32,5 @@ updates: @@
       labels:
       - "github-actions"
       - "dependencies"
-      reviewers:
-      - macalbert
       assignees:
       - macalbert

.github/workflows/markdownlint.yml

-Original file line number
+Diff line change
@@ Expand Up / @@ -33,12 +33,16 @@ jobs: @@
         steps:
           - uses: actions/checkout@v5
+          - name: 📦 Install pnpm
+            uses: pnpm/action-setup@v2
+            with:
+              version: 9
           - name: 🍬 Use Node.js (Eat a Candy)
             uses: actions/setup-node@v6
             with:
               node-version: "22.x"
           - name: 🌈 Run Rainbow Road Markdownlint
             run: |
               echo "::add-matcher::.github/workflows/markdownlint-problem-matcher.json"
-              npm i -g markdownlint-cli
+              pnpm add -g markdownlint-cli
               markdownlint "**/*.md"

.github/workflows/publish-action.yml

-Original file line number
+Diff line change
@@ -0,0 +1,130 @@
+    name: 🔑 Key Chest Publisher
+    on:
+      workflow_dispatch:
+        inputs:
+          version:
+            description: '🎮 Level to publish (e.g., 1.0.0)'
+            required: true
+          update-major:
+            description: '⭐ Update power-up tag (e.g., v1)'
+            type: boolean
+            default: true
+    permissions:
+      contents: write
+    jobs:
+      publish-action:
+        runs-on: ubuntu-24.04
+        timeout-minutes: 15
+        steps:
+          - name: 🧱 Enter the Pipe (Checkout)
+            uses: actions/checkout@v5
+            with:
+              fetch-depth: 0
+          - name: 📦 Install pnpm
+            uses: pnpm/action-setup@v2
+            with:
+              version: 9
+          - name: 🍄 Grab a Mushroom (Setup Node.js)
+            uses: actions/setup-node@v6
+            with:
+              node-version: '20.x'
+              cache: 'pnpm'
+          - name: 📦 Open the ? Block (Install packages)
+            run: pnpm install --frozen-lockfile
+          - name: 🔍 Check if Already Published
+            id: version-check
+            run: |
+              if git rev-parse "v${{ inputs.version }}" >/dev/null 2>&1; then
+                echo "⚠️ Version v${{ inputs.version }} already exists!"
+                echo "should_publish=false" >> $GITHUB_OUTPUT
+              else
+                echo "✅ Version v${{ inputs.version }} is new!"
+                echo "should_publish=true" >> $GITHUB_OUTPUT
+              fi
+          - name: 🏗️ Build the Castle
+            if: steps.version-check.outputs.should_publish == 'true'
+            run: pnpm build:gha
+          - name: 🔍 Check for Hidden Blocks (Verify build)
+            if: steps.version-check.outputs.should_publish == 'true'
+            run: |
+              if [ ! -f "github-action/dist/index.js" ]; then
+                echo "❌ Oh no! Mario fell into a pit! Build failed!"
+                exit 1
+              fi
+              echo "✅ Yahoo! Build successful! 🎉"
+          - name: 📝 Commit Built Files
+            if: steps.version-check.outputs.should_publish == 'true'
+            run: |
+              git config user.name "github-actions[bot]"
+              git config user.email "github-actions[bot]@users.noreply.github.com"
+              git add -f github-action/dist/index.js
+              # Only commit if there are changes
+              if git diff --staged --quiet; then
+                echo "ℹ️ No changes to commit"
+              else
+                git commit -m "build: update compiled files for v${{ inputs.version }}"
+                git push origin HEAD:${{ github.ref_name }}
+              fi
+          - name: 🏁 Place the Flagpole (Create version tag)
+            if: steps.version-check.outputs.should_publish == 'true'
+            run: |
+              echo "🏁 Creating tag v${{ inputs.version }}!"
+              git tag -a "v${{ inputs.version }}" -m "Release v${{ inputs.version }}"
+              git push origin "v${{ inputs.version }}"
+          - name: ⭐ Collect the Star (Update major version)
+            if: inputs.update-major == true && steps.version-check.outputs.should_publish == 'true'
+            run: |
+              MAJOR_VERSION=$(echo "v${{ inputs.version }}" | cut -d. -f1)
+              echo "⭐ Collecting star power! Updating $MAJOR_VERSION to v${{ inputs.version }}"
+              git tag -fa "$MAJOR_VERSION" -m "⭐ Power-up $MAJOR_VERSION now at v${{ inputs.version }}"
+              git push origin "$MAJOR_VERSION" --force
+              echo "🌟 Star collected! $MAJOR_VERSION is now super-charged!"
+          - name: 🏰 Unlock the Castle (Create Release)
+            if: steps.version-check.outputs.should_publish == 'true'
+            uses: ncipollo/release-action@v1
+            with:
+              tag: "v${{ inputs.version }}"
+              name: "🔑 Secret Key Level v${{ inputs.version }}"
+              body: |
+                ## 🔑 Envilder GitHub Action - Level v${{ inputs.version }}
+                🎮 **New power-up unlocked!** Pull secrets from AWS SSM like collecting coins! 🪙
+                ### 🍄 How to use this power-up
+                ```yaml
+                - uses: aws-actions/configure-aws-credentials@v5
+                  with:
+                    role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
+                    aws-region: us-east-1
+                - uses: macalbert/envilder@v${{ inputs.version }}
+                  with:
+                    map-file: param-map.json
+                    env-file: .env
+                ```
+                📖 Check the [manual](https://github.com/macalbert/envilder/blob/main/docs/github-action.md) to master this level!
+                🎊 **Let's-a-go!**
+              generateReleaseNotes: true
+              token: ${{ secrets.GITHUB_TOKEN }}
+              makeLatest: true

.github/workflows/publish.yml → .github/workflows/publish-npm.yml

            
                      Original file line number
                      Diff line number
                      Diff line change
                  
    @@ -1,4 +1,4 @@
  
    name: 🍄 Power-Up Publisher

    name: 📦 Publish NPM Package

    on:

      push:

    @@ -7,7 +7,7 @@ on:
  
        paths:

          - 'src/**'

          - 'package.json'

          - '.github/workflows/publish.yml'

          - '.github/workflows/publish-npm.yml'

    # Add explicit permissions for the GITHUB_TOKEN

    permissions:

    @@ -24,16 +24,17 @@ jobs:
  
            with:

              fetch-depth: 0

          - name: 📦 Install pnpm

            uses: pnpm/action-setup@v2

            with:

              version: 9

          - name: 🛠️ Setup Node.js

            uses: actions/setup-node@v6

            with:

              node-version: '20'

              registry-url: 'https://registry.npmjs.org'

              cache: 'npm'

          # Ensure npm 11.5.1 or later is installed

          - name: Update npm

            run: npm install -g npm@latest

              cache: 'pnpm'

          - name: 👑 Detect version bump

            id: version-check

    @@ -63,23 +64,23 @@ jobs:
  
          - name: 🌟 Install dependencies

            if: steps.version-check.outputs.version_changed == 'true'

            run: npm ci

            run: pnpm install --frozen-lockfile

          - name: 🔥 Lint

            if: steps.version-check.outputs.version_changed == 'true'

            run: npm run lint

            run: pnpm lint

          - name: 🍄 Run tests

            if: steps.version-check.outputs.version_changed == 'true'

            run: npm test

            run: pnpm test

          - name: 🏗️ Build package

            if: steps.version-check.outputs.version_changed == 'true'

            run: npm run build

            run: pnpm build

          - name: 🚩 Publish to npm

            if: steps.version-check.outputs.version_changed == 'true'

            run: npm publish --access public

            run: pnpm publish --access public

          - name: 🏰 Create release

            if: steps.version-check.outputs.version_changed == 'true'

.github/workflows/test-action.yml

-Original file line number
+Diff line change
@@ -0,0 +1,83 @@
+    name: 🔑 Key Chest Test
+    permissions:
+      id-token: write  # Required for OIDC authentication with AWS
+      contents: read
+    on:
+      workflow_dispatch: {}
+      pull_request:
+        branches:
+          - "*"
+        types:
+          - opened
+          - reopened
+          - synchronize
+          - ready_for_review
+        paths:
+          - ".github/workflows/test-action.yml"
+          - "github-action/action.yml"
+          - "src/apps/gha/**"
+          - "tests/apps/gha/**"
+          - "e2e/github-action.test.ts"
+    concurrency:
+      group: ${{ github.workflow }}-${{ github.head_ref || github.sha }}
+      cancel-in-progress: true
+    jobs:
+      test-action:
+        runs-on: ubuntu-24.04
+        if: ${{ !github.event.pull_request.draft }}
+        timeout-minutes: 15
+        steps:
+          - name: 🧱 Enter the Pipe (Checkout)
+            uses: actions/checkout@v5
+          - name: 📦 Install pnpm
+            uses: pnpm/action-setup@v2
+            with:
+              version: 9
+          - name: 🍄 Grab a Mushroom (Setup Node.js with Cache)
+            uses: actions/setup-node@v6
+            with:
+              node-version: '20.x'
+              cache: 'pnpm'
+          - name: 🪙 Collect Coins (Configure AWS credentials)
+            uses: aws-actions/configure-aws-credentials@v5
+            with:
+              role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
+              aws-region: ${{ secrets.AWS_REGION }}
+          - name: 📦 Open the ? Block (Install packages)
+            run: pnpm install --frozen-lockfile
+          - name: 🏗️ Build the Castle
+            run: pnpm build
+          - name: 📦 Bundle GitHub Action
+            run: pnpm run build:gha
+          - name: 🔐 Test Action - Pull Secrets
+            uses: ./github-action
+            with:
+              map-file: e2e/sample/param-map.json
+              env-file: .env.test
+          - name: ✅ Verify .env file was created
+            run: |
+              if [ ! -f .env.test ]; then
+                echo "❌ .env.test file was not created!"
+                exit 1
+              fi
+              echo "✅ .env.test file created successfully!"
+              echo "Contents:"
+              cat .env.test
+          - name: 🧹 Clean up test file
+            if: always()
+            run: rm -f .env.test

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat: Create github-action #91

Uh oh!

Diff view

Diff view

There are no files selected for viewing

Uh oh!