mirror of
https://github.com/BaaRai/ARTEX.git
synced 2026-11-13 11:40:53 +08:00
BaaRai
e233c02314
Comments, doc comments, UI labels, log and error messages, LLM prompt strings, markdown docs, test data and assertions. Identifiers, enum keys, routes, placeholders and code structure are unchanged. Notes: - docs/漏洞流量证据.md renamed to docs/vulnerability-traffic-evidence.md - tests that exercised CJK specific handling (GBK zip names, Chinese full text search) now use ASCII equivalents; go build passes and the test suite matches the pre translation baseline (remaining failures need a PostgreSQL DSN and fail identically on the original) - frontend mention syntax now uses English kinds (finding, asset, ...) matching the backend, chat mentions tests pass
138 lines
4.4 KiB
YAML
138 lines
4.4 KiB
YAML
name: release
|
|
on:
|
|
push:
|
|
tags: ["v*"]
|
|
|
|
permissions:
|
|
contents: write # required to create the Release
|
|
|
|
jobs:
|
|
# ① Frontend static export (once), reused by the cross-compiled platform builds
|
|
frontend:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-node@v4
|
|
with:
|
|
node-version: "22"
|
|
cache: npm
|
|
cache-dependency-path: web/package-lock.json
|
|
- run: npm ci
|
|
working-directory: web
|
|
- run: npm run build:static
|
|
working-directory: web
|
|
- uses: actions/upload-artifact@v4
|
|
with:
|
|
name: web-dist
|
|
path: web/out
|
|
|
|
# ② Cross-compile for five platforms (with embedded frontend) + zip packaging
|
|
binaries:
|
|
needs: frontend
|
|
runs-on: ubuntu-latest
|
|
strategy:
|
|
matrix:
|
|
include:
|
|
- { goos: linux, goarch: amd64 }
|
|
- { goos: linux, goarch: arm64 }
|
|
- { goos: darwin, goarch: amd64 }
|
|
- { goos: darwin, goarch: arm64 }
|
|
- { goos: windows, goarch: amd64 }
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-go@v5
|
|
with:
|
|
go-version: "1.26"
|
|
cache: true
|
|
- uses: actions/download-artifact@v4
|
|
with:
|
|
name: web-dist
|
|
path: server/webui/dist
|
|
- name: Build and package with build.sh
|
|
env:
|
|
ARTEX_TARGET_OS: ${{ matrix.goos }}
|
|
ARTEX_TARGET_ARCH: ${{ matrix.goarch }}
|
|
ARTEX_BUILD_VERSION: ${{ github.ref_name }}
|
|
ARTEX_SKIP_FRONTEND: "1"
|
|
ARTEX_SKIP_NPM_CI: "1"
|
|
# UPX self-extracting ELF binaries crash on some Linux kernels, virtualization
|
|
# setups, and security policies. Releases use Go linker trimming and zip
|
|
# compression, prioritizing portability.
|
|
ARTEX_COMPRESS: "0"
|
|
ARTEX_PACKAGE: "1"
|
|
ARTEX_PACKAGE_DIR: dist
|
|
run: |
|
|
./build.sh --target "${ARTEX_TARGET_OS}/${ARTEX_TARGET_ARCH}"
|
|
- name: Smoke test Linux amd64 binary
|
|
if: matrix.goos == 'linux' && matrix.goarch == 'amd64'
|
|
run: dist/artex-linux-amd64/artex -h
|
|
- uses: actions/upload-artifact@v4
|
|
with:
|
|
name: pkg-${{ matrix.goos }}-${{ matrix.goarch }}
|
|
path: "dist/*.zip"
|
|
# Upload raw Linux binaries separately for reuse by the docker job (avoids rebuilding the frontend + Go inside the image)
|
|
- if: matrix.goos == 'linux'
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: bin-linux-${{ matrix.goarch }}
|
|
path: dist/artex-linux-${{ matrix.goarch }}/artex
|
|
|
|
# ③ Collect all zips → create the GitHub Release
|
|
release:
|
|
needs: binaries
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/download-artifact@v4
|
|
with:
|
|
pattern: pkg-*
|
|
merge-multiple: true
|
|
path: dist
|
|
- name: Generate checksums
|
|
working-directory: dist
|
|
run: sha256sum *.zip > SHA256SUMS
|
|
- uses: softprops/action-gh-release@v2
|
|
with:
|
|
files: |
|
|
dist/*.zip
|
|
dist/SHA256SUMS
|
|
generate_release_notes: true
|
|
|
|
# ④ Multi-arch image → push to Docker Hub (reuses the Linux binaries built by the
|
|
# binaries job; the image only installs tools + ships the binary; arm64 only needs
|
|
# to emulate the apt layer, so builds are much faster)
|
|
docker:
|
|
needs: binaries
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4 # fetch the Dockerfile and skills/
|
|
- uses: actions/download-artifact@v4
|
|
with:
|
|
name: bin-linux-amd64
|
|
path: dist/amd64
|
|
- uses: actions/download-artifact@v4
|
|
with:
|
|
name: bin-linux-arm64
|
|
path: dist/arm64
|
|
- uses: docker/setup-qemu-action@v3
|
|
- uses: docker/setup-buildx-action@v3
|
|
- uses: docker/login-action@v3
|
|
with:
|
|
username: ${{ secrets.DOCKERHUB_USERNAME }}
|
|
password: ${{ secrets.DOCKERHUB_TOKEN }}
|
|
- uses: docker/metadata-action@v5
|
|
id: meta
|
|
with:
|
|
images: autumn27/artex
|
|
tags: |
|
|
type=ref,event=tag
|
|
type=raw,value=latest
|
|
- uses: docker/build-push-action@v6
|
|
with:
|
|
context: .
|
|
platforms: linux/amd64,linux/arm64
|
|
push: true
|
|
tags: ${{ steps.meta.outputs.tags }}
|
|
labels: ${{ steps.meta.outputs.labels }}
|
|
cache-from: type=gha
|
|
cache-to: type=gha,mode=max
|