mirror of
https://github.com/ArchiveBox/ArchiveBox.git
synced 2026-09-14 11:06:13 +05:00
56 lines
2.4 KiB
Python
56 lines
2.4 KiB
Python
from pathlib import Path
|
|
import shlex
|
|
|
|
import yaml
|
|
|
|
|
|
REPO_ROOT = Path(__file__).resolve().parents[2]
|
|
RELEASE_WORKFLOW = REPO_ROOT / ".github" / "workflows" / "release.yml"
|
|
|
|
|
|
def test_release_uses_registered_publisher_and_authorized_tag_credentials():
|
|
assert RELEASE_WORKFLOW.exists()
|
|
assert not (REPO_ROOT / ".github" / "workflows" / "release-runner.yml").exists()
|
|
|
|
workflow = yaml.safe_load(RELEASE_WORKFLOW.read_text())
|
|
jobs = workflow["jobs"]
|
|
python_release = jobs["python-release"]
|
|
docker_release = jobs["docker-release"]
|
|
|
|
assert python_release["environment"] == "pypi"
|
|
checkout = python_release["steps"][0]
|
|
assert checkout["with"]["token"] == "${{ secrets.RELEASE_GH_TOKEN || github.token }}"
|
|
assert docker_release["needs"] == "python-release"
|
|
|
|
docker_meta = next(step for step in docker_release["steps"] if step.get("id") == "docker_meta")
|
|
tag_script = docker_meta["run"]
|
|
assert 'echo "${DOCKERHUB_IMAGE}:dev"' in tag_script
|
|
assert 'echo "${DOCKERHUB_IMAGE}:sha-${SHORT_SHA}"' in tag_script
|
|
assert 'echo "${DOCKERHUB_IMAGE}:${VERSION}"' in tag_script
|
|
|
|
logical_lines = []
|
|
current_line = ""
|
|
for line in (REPO_ROOT / "bin" / "release.sh").read_text().splitlines():
|
|
current_line = f"{current_line} {line.strip()}".strip()
|
|
if current_line.endswith("\\"):
|
|
current_line = current_line[:-1]
|
|
continue
|
|
logical_lines.append(current_line)
|
|
current_line = ""
|
|
assert not current_line
|
|
|
|
release_commands = [shlex.split(line) for line in logical_lines if line.startswith(("$GIT_BINARY ", "$UV_BINARY ", "$GH_BINARY "))]
|
|
create_tag = next(
|
|
index
|
|
for index, command in enumerate(release_commands)
|
|
if command[:3] == ["$GIT_BINARY", "push", "origin"] and command[3] == "refs/tags/${TAG}"
|
|
)
|
|
publish_pypi = next(index for index, command in enumerate(release_commands) if command[:2] == ["$UV_BINARY", "publish"])
|
|
create_release = next(index for index, command in enumerate(release_commands) if command[:3] == ["$GH_BINARY", "release", "create"])
|
|
|
|
publish_command = release_commands[publish_pypi]
|
|
assert "--no-cache" in publish_command
|
|
assert publish_command[publish_command.index("--trusted-publishing") + 1] == "always"
|
|
assert "--verify-tag" in release_commands[create_release]
|
|
assert create_tag < publish_pypi < create_release
|