Improve GHA workflow and steps for package release automation. (#1240)

* Improve GHA workflow and steps for package release automation. * updating lychee config to exclude correct URLs Co-authored-by: David Waltermire <david.waltermire@nist.gov>
usnistgov · May 9, 2022 · 131415e · 131415e
1 parent bb80913
commit 131415e
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 27 deletions.
diff --git a/.github/workflows/package-release.yml b/.github/workflows/package-release.yml
@@ -24,7 +24,6 @@ jobs:
     steps:
       # use this for main repo master builds
       - uses: actions/checkout@v2
-        if: github.repository == env.HOME_REPO
         with:
           path: ${{ env.OSCAL_HOME }}
           submodules: recursive
@@ -40,38 +39,20 @@ jobs:
       - name: Package Release
         run: |
           bash "${OSCAL_CICD_PATH}/package-release.sh" "${OSCAL_WORKING_PATH}"
-          tar -jcvf "${RELEASE_NAME}.tar.bz2" -C "${OSCAL_WORKING_PATH}/archive" .
+          tar -jcvf "${OSCAL_WORKING_PATH}/${RELEASE_NAME}.tar.bz2" -C "${OSCAL_WORKING_PATH}/archive" .
           (cd "${OSCAL_WORKING_PATH}/archive" && zip -r "../${RELEASE_NAME}.zip" .)
       - uses: actions/upload-artifact@v2
         with:
           name: release-artifacts
           path: |
-            "${{ env.OSCAL_WORKING_PATH }}/${{ env.RELEASE_NAME }}.tar.bz2"
-            "${{ env.OSCAL_WORKING_PATH }}/${{ env.RELEASE_NAME }}.zip"
+            ${{ env.OSCAL_WORKING_PATH }}/${{ env.RELEASE_NAME }}.tar.bz2
+            ${{ env.OSCAL_WORKING_PATH }}/${{ env.RELEASE_NAME }}.zip
           retention-days: 5
-      - uses: ncipollo/release-action@v1.9.0
+      - uses: ncipollo/release-action@58ae73b360456532aafd58ee170c045abbeaee37 # v1.10.0
         with:
           name: OSCAL ${{ env.RELEASE_VERSION }} Release
           allowUpdates: false
           draft: true
           generateReleaseNotes: true
           token: ${{ secrets.COMMIT_TOKEN }}
-          continue-on-error: true
-      - uses: ncipollo/release-action@v1.9.0
-        with:
-          name: OSCAL ${{ env.RELEASE_VERSION }} Release
-          draft: true
-          allowUpdates: true
-          omitBodyDuringUpdate: true
-          omitNameDuringUpdate: true
-          token: ${{ secrets.COMMIT_TOKEN }}
-          artifacts: ${{ env.OSCAL_WORKING_PATH }}/${{ env.RELEASE_NAME }}.tar.bz2
-      - uses: ncipollo/release-action@v1.9.0
-        with:
-          name: OSCAL ${{ env.RELEASE_VERSION }} Release
-          draft: true
-          allowUpdates: true
-          omitBodyDuringUpdate: true
-          omitNameDuringUpdate: true
-          token: ${{ secrets.COMMIT_TOKEN }}
-          artifacts: ${{ env.OSCAL_WORKING_PATH }}/${{ env.RELEASE_NAME }}.zip
+          artifacts: "${{ env.OSCAL_WORKING_PATH }}/*.zip,${{ env.OSCAL_WORKING_PATH }}/*.tar.bz2"
diff --git a/build/config/.lycheeignore b/build/config/.lycheeignore
@@ -1,13 +1,12 @@
 https://defense.gov/
+http://fedramp.gov/ns/oscal
 https://fedramp.gov/ns/oscal
-http://www.fedramp.gov/ns/oscal/
-https://www.fedramp.gov/ns/oscal/
 http://www.first.org/cvss/v2.0
 http://www.first.org/cvss/v3.0
 http://www.first.org/cvss/v3.1
 https://tools.ietf.org/html.*
+http://csrc.nist.gov/ns/.*
 http://csrc.nist.gov/oscal
 https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/xxxx
-http://csrc.nist.gov/ns/.*
 https://cdn.telos.com/wp-content/uploads/2021/06/22150746/Xacta-360-EULA-US.pdf
 https://search.usa.gov/search