From 4c72d472ebfe97aa674966aeaa8e3511ef6555a4 Mon Sep 17 00:00:00 2001
From: Alex Eagle <alex@aspect.dev>
Date: Fri, 10 Feb 2023 06:28:04 -0800
Subject: [PATCH] release: publish release artifact

GitHub's stability guarantee for the archive is iffy, and we want metrics on downloads.

See https://github.com/bazel-contrib/SIG-rules-authors/issues/11#issuecomment-1411222578
---
 .github/workflows/release.yml                              | 6 ++++--
 .../workflows/{workspace_snippet.sh => release_prep.sh}    | 7 +++++--
 2 files changed, 9 insertions(+), 4 deletions(-)
 rename .github/workflows/{workspace_snippet.sh => release_prep.sh} (72%)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0acd7ad0..8d750609 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -27,8 +27,8 @@ jobs:
           # Bazelisk will download bazel to here
           XDG_CACHE_HOME: ~/.cache/bazel-repo
         run: bazel --bazelrc=.github/workflows/ci.bazelrc --bazelrc=.bazelrc test //...
-      - name: Prepare workspace snippet
-        run: .github/workflows/workspace_snippet.sh ${{ env.GITHUB_REF_NAME }} > release_notes.txt
+      - name: Prepare release
+        run: .github/workflows/release_prep.sh ${{ env.GITHUB_REF_NAME }} > release_notes.txt
       - name: Release
         uses: softprops/action-gh-release@v1
         with:
@@ -36,3 +36,5 @@ jobs:
           # Use GH feature to populate the changelog automatically
           generate_release_notes: true
           body_path: release_notes.txt
+          files: rules_oci-*.tar.gz
+          fail_on_unmatched_files: true
diff --git a/.github/workflows/workspace_snippet.sh b/.github/workflows/release_prep.sh
similarity index 72%
rename from .github/workflows/workspace_snippet.sh
rename to .github/workflows/release_prep.sh
index 1786f916..09d941f9 100755
--- a/.github/workflows/workspace_snippet.sh
+++ b/.github/workflows/release_prep.sh
@@ -5,8 +5,11 @@ set -o errexit -o nounset -o pipefail
 # Set by GH actions, see
 # https://docs.github.com/en/actions/learn-github-actions/environment-variables#default-environment-variables
 TAG=${GITHUB_REF_NAME}
+# The prefix is chosen to match what GitHub generates for source archives
 PREFIX="rules_oci-${TAG:1}"
-SHA=$(git archive --format=tar --prefix=${PREFIX}/ ${TAG} | gzip | shasum -a 256 | awk '{print $1}')
+ARCHIVE="rules_oci-$TAG.tar.gz"
+git archive --format=tar --prefix=${PREFIX}/ ${TAG} | gzip > $ARCHIVE
+SHA=$(shasum -a 256 $ARCHIVE | awk '{print $1}')
 
 cat << EOF
 WORKSPACE snippet:
@@ -16,7 +19,7 @@ http_archive(
     name = "contrib_rules_oci",
     sha256 = "${SHA}",
     strip_prefix = "${PREFIX}",
-    url = "https://github.com/bazel-contrib/rules_oci/archive/${TAG}.tar.gz",
+    url = "https://github.com/bazel-contrib/rules_oci/releases/download/${TAG}/${ARCHIVE}",
 )
 
 # Fetches the rules_oci dependencies.