intruder-mcp

name: release

on:
  push:
    tags:
      - 'v*'
env:
  IMAGE_NAME: ${{ github.event.repository.name }}

permissions:
  contents: read

jobs:
  release:
    name: build and release
    runs-on: ubuntu-latest
    permissions:
      contents: write # needed to write releases
      packages: write # needed for ghcr access
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: Setup QEMU
        uses: docker/setup-qemu-action@v3
        with:
          platforms: all
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      - name: Login to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - name: Prepare
        id: prep
        run: |
          VERSION=sha-${GITHUB_SHA::8}
          if [[ $GITHUB_REF == refs/tags/* ]]; then
            VERSION=${GITHUB_REF/refs\/tags\//}
          fi
          echo "BUILD_DATE=$(date -u +'%Y-%m-%dT%H:%M:%SZ')" >> $GITHUB_OUTPUT
          echo "VERSION=${VERSION}" >> $GITHUB_OUTPUT
          echo "REVISION=${GITHUB_SHA}" >> $GITHUB_OUTPUT
      - name: Build and push
        uses: docker/build-push-action@v6
        with:
          push: true
          context: .
          platforms: linux/amd64,linux/arm64
          file: ./Dockerfile
          tags: |
            ghcr.io/intruder-io/${{ env.IMAGE_NAME }}:${{ steps.prep.outputs.VERSION }}
            ghcr.io/intruder-io/${{ env.IMAGE_NAME }}:latest
      - name: Download release notes utility
        env:
          GH_REL_URL: https://github.com/buchanae/github-release-notes/releases/download/0.2.0/github-release-notes-linux-amd64-0.2.0.tar.gz
        run: cd /tmp && curl -sSL ${GH_REL_URL} | tar xz && sudo mv github-release-notes /usr/local/bin/
      - name: Generate release notes
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          echo 'CHANGELOG' > /tmp/release.txt
          github-release-notes -org intruder-io -repo intruder-mcp -since-latest-release >> /tmp/release.txt
      - name: Create release
        uses: ncipollo/release-action@v1
        with:
          bodyFile: "/tmp/release.txt"
          token: ${{ secrets.GITHUB_TOKEN }}