packages/.github/workflows/build-tailscale.yml at 13980e1434715c72de05577d04286c56e6f5dbb2 · tuna-os/packages · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
name: Build Tailscale Package

on:
  push:
    branches:
      - main
    paths:
      - 'packages/tailscale/**'
      - '.github/workflows/build-tailscale.yml'
      - '.github/workflows/reusable-build-package.yml'
      - 'scripts/**'
  pull_request:
    paths:
      - 'packages/tailscale/**'
      - '.github/workflows/build-tailscale.yml'
      - '.github/workflows/reusable-build-package.yml'
      - 'scripts/**'
  workflow_dispatch:

jobs:
  prepare:
    name: Determine publish flag
    runs-on: ubuntu-latest
    outputs:
      publish: ${{ steps.set-publish.outputs.publish }}
    steps:
      - name: Determine publish flag
        id: set-publish
        run: |
          if [ "${{ github.event_name }}" = "push" ] || [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
            echo "publish=true" >> "${GITHUB_OUTPUT}"
          else
            echo "publish=false" >> "${GITHUB_OUTPUT}"
          fi

  build:
    name: Build tailscale
    needs: prepare
    uses: ./.github/workflows/reusable-build-package.yml
    with:
      package-name: tailscale
      arches: '["x86_64", "x86_64_v2", "aarch64"]'
      publish: ${{ needs.prepare.outputs.publish == 'true' }}
    secrets:
      COSIGN_PRIVATE_KEY: ${{ secrets.COSIGN_PRIVATE_KEY }}
      GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
      GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}