Add Microsoft Installer (MSI) package to releases

.github/win-msi/out/.gitignore

@@ -0,0 +1,2 @@
+**
+!.gitignore

.github/win-msi/src/saml2aws.wxs

@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<Wix xmlns="http://schemas.microsoft.com/wix/2006/wi">
+    <Product Id="*" UpgradeCode="042c301c-5154-4a77-9438-a01d4d2a9dd4" Version="$(var.Saml2AwsVer)" Language="1033" Name="saml2aws" Manufacturer="Versent">
+        <Package InstallerVersion="300" Compressed="yes" Description="!(bind.property.ProductName) !(bind.property.ProductVersion)" Platform="x64"/>
+        <Media Id="1" Cabinet="saml2aws.cab" EmbedCab="yes" />
+
+        <!-- Step 1: Define the directory structure -->
+        <Directory Id="TARGETDIR" Name="SourceDir">
+            <Directory Id="ProgramFiles64Folder">
+                <Directory Id="APPLICATIONROOTDIRECTORY" Name="Versent"/>
+            </Directory>
+        </Directory>
+
+        <!-- Step 2: Add files to your installer package -->
+        <DirectoryRef Id="APPLICATIONROOTDIRECTORY">
+            <Component Id="saml2aws.exe" Guid="4909b826-b4d1-4f46-9b55-ab765a04dc24" Win64="yes">
+                <File Id="saml2awscli" Name="saml2aws.exe" Source="src\bin\saml2aws.exe" KeyPath="yes" Checksum="yes"/>
+                <!-- Set the PATH  to include the binary -->
+                <Environment Id="PATH" Name="PATH" Value="[APPLICATIONROOTDIRECTORY]" Permanent="no" Part="last" Action="set" System="yes" />
+            </Component>
+        </DirectoryRef>
+
+        <!-- Step 3: Tell WiX to install the files -->
+        <Feature Id="MainApplication" Title="saml2aws CLI" Level="1">
+            <ComponentRef Id="saml2aws.exe" />
+        </Feature>
+    </Product>
+</Wix>

.github/win-msi/wix.sh

@@ -0,0 +1,3 @@
+#!/usr/bin/env sh
+candle src/saml2aws.wxs -dSaml2AwsVer=${VERSION} -o "out/"
+light -sval "out/saml2aws.wixobj" -o "out/saml2aws_${VERSION}_windows_amd64.msi"

.github/workflows/release.yml

@@ -3,7 +3,12 @@ name: release
 on:
   push:
     tags:
-    - '*'
+      - '*'
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: The tag to run against. This trigger only runs the MSI builder.
+        required: true
 
 jobs:
   release:
@@ -17,6 +22,7 @@ jobs:
         - ubuntu-latest
         - macos-latest
     runs-on: ${{ matrix.os }}
+    if: github.event_name != 'workflow_dispatch'
     steps:
 
     - name: Set up Go 1.x
@@ -38,3 +44,58 @@ jobs:
         args: release --clean --config .goreleaser.${{ matrix.os }}.yml
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+  windows-msi:
+    name: Build Windows MSI and upload to release
+    runs-on: ubuntu-latest
+    needs: [release]
+    if: >-  # https://github.com/actions/runner/issues/491
+      always() &&
+      (needs.release.result == 'success' || needs.release.result == 'skipped')
+    env:
+      INSTALLER: ${{ github.workspace }}/.github/win-msi
+      BIN: ${{ github.workspace }}/.github/win-msi/src/bin
+      WIXIMG: dactiv/wix@sha256:17d232708589641f5632f9a1ff9463ad087b192cea7b8e6012d2b47ec6af5f6c
+    steps:
+    - name: Normalize tag values
+      run: |
+        if [[ "${{ github.event_name }}" == "workflow_dispatch" ]] ; then
+            VER=${{ github.event.inputs.tag }}
+        else
+            VER=${GITHUB_REF/refs\/tags\//}
+        fi
+
+        VERSION=${VER//v}
+
+        echo "VER_TAG=$VER" >> $GITHUB_ENV
+        echo "VERSION=$VERSION" >> $GITHUB_ENV
+        echo "ASSET=saml2aws_${VERSION}_windows_amd64.zip" >> $GITHUB_ENV
+
+    - name: Check out code
+      uses: actions/checkout@v3
+
+    - name: Retrieve the release asset
+      id: asset
+      uses: robinraju/release-downloader@768b85c8d69164800db5fc00337ab917daf3ce68  # v1.7
+      with:
+        repository: ${{ github.repository }}
+        tag: ${{ env.VER_TAG }}
+        fileName: ${{ env.ASSET }}
+        out-file-path: ${{ env.BIN }}
+
+    - name: Unzip asset
+      working-directory: ${{ env.BIN }}
+      run: unzip "${ASSET}"
+
+    - name: Build MSI
+      run: |
+        # container does not run as root
+        chmod -R o+rw "${INSTALLER}"
+
+        cat "${INSTALLER}/wix.sh" | docker run --rm -i -e VERSION -v "${INSTALLER}:/wix" ${WIXIMG} /bin/sh
+
+    - name: Upload the asset to the release
+      uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844  # v0.1.15 / v1
+      with:
+        tag_name: ${{ env.VER_TAG }}
+        files: ${{ env.INSTALLER }}/out/*.msi