workflow:feat - Automating the release notes

In this PR I'll update Release Beta, RC and Final to set automatic
body in release notes.I changed file release.yml to release-final.yml

Signed-off-by: Wilian Gabriel <wilian.silva@zup.com.br>

.github/workflows/release-alpha.yml

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-name: ReleaseAlpha
+name: release-alpha
 
 on:
   push:
@@ -25,6 +25,7 @@ jobs:
     permissions:
       contents: write
       packages: write
+      issues:   write
     runs-on: ubuntu-latest
     env:
       COSIGN_KEY_LOCATION: "/tmp/cosign.key"
@@ -67,7 +68,7 @@ jobs:
           push: true
           context: .
           file: ./deployments/dockerfiles/Dockerfile
-          tags: horuszup/horusec-operator:alpha
+          tags: wiliansilvazup/horusec-operator:alpha
 
       # Sign alpha operator using mage
       - name: Sign image
@@ -103,4 +104,4 @@ jobs:
 
             ## Docker images
 
-            - `docker pull horuszup/horusec-operator:alpha`
+            - `docker pull wiliansilvazup/horusec-operator:alpha`

.github/workflows/release-beta.yml

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-name: ReleaseBeta
+name: release-beta
 
 on:
   workflow_dispatch:
@@ -27,11 +27,12 @@ jobs:
     permissions:
       contents: write
       packages: write
+      issues:   write
     runs-on: ubuntu-latest
     env:
       COSIGN_KEY_LOCATION: "/tmp/cosign.key" #private key used to sing the artefacts and images location.
       COSIGN_PWD: ${{ secrets.COSIGN_PWD }}
-
+    if: contains('["wiliansilvazup","matheusalcantarazup","lucasbrunozup","nathanmartinszup","iancardosozup","oliveirafelipezup"]', github.actor)
     steps:
       - name: Checkout
         uses: actions/checkout@v2
@@ -66,7 +67,7 @@ jobs:
         uses: crazy-max/ghaction-import-gpg@v4
         with:
           gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
-          passphrase: ${{ secrets.GPG_PASSPHRASE }}
+          passphrase: ${{ secrets.GPG_PASSWORD }}
           git_user_signingkey: true
           git_commit_gpgsign: true
 
@@ -93,9 +94,9 @@ jobs:
       - name: Checkout Release Branch
         run: mage CheckoutReleaseBranch ${{ steps.updated-version.outputs.nextReleaseBranchName }}
 
-      # Creates a tag with the next version created during the last step, but still don't publish it.
-      - name: Create tag
-        run: mage CreateLocalTag ${{ steps.updated-version.outputs.nextBetaVersion }}
+      # Creates a tag with the next version created during the last step
+      - name: Create and push tag
+        run: mage -v createAndPushTag ${{ steps.updated-version.outputs.nextBetaVersion }}
 
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v2
@@ -105,8 +106,15 @@ jobs:
           args: release --rm-dist
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          COSIGN_PWD: ${{ secrets.COSIGN_PWD }}
           GORELEASER_CURRENT_TAG: ${{ steps.updated-version.outputs.nextBetaVersion }}
+          GORELEASER_PREVIOUS_TAG: ${{ steps.updated-version.outputs.actualBetaVersion }}
 
       # Publish the release and tag using mage
       - name: Push All
-        run: mage GitPushAll
+        if: ${{ success() }}
+        run: mage -v gitPushAll
+
+      - name: Remove updates
+        if: ${{ !success() }}
+        run: ./mage -v removeTag ${{ steps.updated-version.outputs.nextBetaVersion }}

.github/workflows/release.yml → .github/workflows/release-final.yml

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-name: Release
+name: release-final
 
 on:
   workflow_dispatch:
@@ -26,15 +26,16 @@ on:
 
 permissions: read-all
 jobs:
-  Release:
+  ReleaseFinal:
     permissions:
       contents: write
       packages: write
+      issues:   write
     runs-on: ubuntu-latest
     env:
       COSIGN_KEY_LOCATION: "/tmp/cosign.key" #private key used to sing the artefacts and images location.
       COSIGN_PWD: ${{ secrets.COSIGN_PWD }}
-
+    if: contains('["wiliansilvazup","matheusalcantarazup","lucasbrunozup","nathanmartinszup","iancardosozup","oliveirafelipezup"]', github.actor)
     steps:
       - name: Checkout
         uses: actions/checkout@v2
@@ -69,7 +70,7 @@ jobs:
         uses: crazy-max/ghaction-import-gpg@v4
         with:
           gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
-          passphrase: ${{ secrets.GPG_PASSPHRASE }}
+          passphrase: ${{ secrets.GPG_PASSWORD }}
           git_user_signingkey: true
           git_commit_gpgsign: true
 
@@ -96,9 +97,9 @@ jobs:
       - name: Checkout Release Branch
         run: mage CheckoutReleaseBranch ${{ steps.updated-version.outputs.nextReleaseBranchName }}
 
-      # Creates a tag with the next version created during the last step, but still don't publish it.
-      - name: Create tag
-        run: mage CreateLocalTag ${{ steps.updated-version.outputs.nextReleaseVersion }}
+      # Creates a tag with the next version created during the last step
+      - name: Create and push tag
+        run: ./mage -v createAndPushTag ${{ steps.updated-version.outputs.nextReleaseVersion }}
 
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v2
@@ -108,11 +109,14 @@ jobs:
           args: release --rm-dist
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          COSIGN_PWD: ${{ secrets.COSIGN_PWD }}
           GORELEASER_CURRENT_TAG: ${{ steps.updated-version.outputs.nextReleaseVersion }}
+          GORELEASER_PREVIOUS_TAG: ${{ steps.updated-version.outputs.actualReleaseVersion }}
 
       # This step updates the defaults.json to the platform version passed in the workflow input for all microservices.
       # The README.md and kustomization.yaml also are updated to match the new operator version that ir being released.
       - name: Update versioning files
+        if: ${{ success() }}
         run: mage UpdateVersioningFiles
         env:
           HORUSEC_PLATFORM_VERSION: ${{ github.event.inputs.horusecPlatformVersion }}
@@ -122,6 +126,7 @@ jobs:
       # The changes made in the last step are committed to the branch that the workflow was triggered, this commit is not
       # going to trigger any workflow cause the skip ci in the commit message.
       - name: Commit changes
+        if: ${{ success() }}
         uses: EndBug/add-and-commit@v8.0.2
         with:
           push: true
@@ -137,17 +142,23 @@ jobs:
       # workflow is started from a branch that isn't the main branch, for example a release branch.
       # When the workflow it's triggered to run on main, the commit it's going to be made directly to the main branch.
       - name: Cherry pick
+        if: ${{ success() }}
         id: cherry-pick
         run: mage CherryPick
 
       # This step utilizes an action to create a pull request with the branch that was cherry picked on the last step
       # into the main branch. As the last commit, this also needs to run only when the release workflow is started from a
       # branch that isn't the main branch. Others workflows should be skipped cause of the skip ci in the pull request title.
       - name: Create Pull Request
+        if: ${{ success() }}
         uses: repo-sync/pull-request@v2
         with:
           source_branch: "${{ steps.cherry-pick.outputs.cherryPickBranchName }}"
           destination_branch: "main"
           pr_title: "versioning:release - [skip ci] automatic pull request updating versioning files"
           pr_body: "This is a automatic pull request that contains changes to files that need to be updated with the new release version. Where the commit ${{ steps.cherry-pick.outputs.commitShaToPick }} was cherry picked from the release branch, which already contains all the necessary changes."
           github_token: ${{ secrets.HORUSEC_PUSH_TOKEN }}
+
+      - name: Remove updates
+        if: ${{ !success() }}
+        run: ./mage -v removeTag ${{ steps.updated-version.outputs.nextReleaseVersion }}

.github/workflows/release-rc.yml

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-name: ReleaseRC
+name: release-rc
 
 on:
   workflow_dispatch:
@@ -27,11 +27,12 @@ jobs:
     permissions:
       contents: write
       packages: write
+      issues:   write
     runs-on: ubuntu-latest
     env:
       COSIGN_KEY_LOCATION: "/tmp/cosign.key" #private key used to sing the artefacts and images location.
       COSIGN_PWD: ${{ secrets.COSIGN_PWD }}
-
+    if: contains('["wiliansilvazup","matheusalcantarazup","lucasbrunozup","nathanmartinszup","iancardosozup","oliveirafelipezup"]', github.actor)
     steps:
       - name: Checkout
         uses: actions/checkout@v2
@@ -66,7 +67,7 @@ jobs:
         uses: crazy-max/ghaction-import-gpg@v4
         with:
           gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
-          passphrase: ${{ secrets.GPG_PASSPHRASE }}
+          passphrase: ${{ secrets.GPG_PASSWORD }}
           git_user_signingkey: true
           git_commit_gpgsign: true
 
@@ -93,9 +94,9 @@ jobs:
       - name: Checkout Release Branch
         run: mage CheckoutReleaseBranch ${{ steps.updated-version.outputs.nextReleaseBranchName }}
 
-      # Creates a tag with the next version created during the last step, but still don't publish it.
-      - name: Create tag
-        run: mage CreateLocalTag ${{ steps.updated-version.outputs.nextRCVersion }}
+      # Creates a tag with the next version created during the last step
+      - name: Create and push tag
+        run: ./mage -v createAndPushTag ${{ steps.updated-version.outputs.nextRCVersion }}
 
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v2
@@ -105,8 +106,15 @@ jobs:
           args: release --rm-dist
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          COSIGN_PWD: ${{ secrets.COSIGN_PWD }}
           GORELEASER_CURRENT_TAG: ${{ steps.updated-version.outputs.nextRCVersion }}
+          GORELEASER_PREVIOUS_TAG: ${{ steps.updated-version.outputs.actualRCVersion }}
 
       # Publish the release and tag using mage
       - name: Push All
-        run: mage GitPushAll
+        if: ${{ success() }}
+        run: mage -v gitPushAll
+
+      - name: Remove updates
+        if: ${{ !success() }}
+        run: ./mage -v removeTag ${{ steps.updated-version.outputs.nextRCVersion }}

.goreleaser.yml

@@ -28,18 +28,48 @@ builds:
     goarch:
       - amd64
     binary: horusec-operator
+
 changelog:
-  skip: true
+  skip: false
+  use: github
+  groups:
+  - title: 'Features'
+    regexp: "^.*:(feature|feat)\\s-.*$"
+    order: 0
+  - title: 'Bug fixes'
+    regexp: "^.*:(bugfix|fix)\\s-.*$"
+    order: 1
+  - title: 'Hotfixes'
+    regexp: "^.*:hotfix\\s-.*$"
+    order: 2
+  - title: 'Chores'
+    regexp: "^.*:chore\\s-.*$"
+    order: 3
+  - title: Others
+    order: 999
+  filters:
+    exclude:
+      - '^deps:chore.*$'
+      - '^Commit\sfrom\sGitHub\sActions.*$'
+      - '^build(deps):.*$'
+      - '^Update\sdependency.*$'
+      - '^versioning:release.*$'
+
 snapshot:
   name_template: "{{ incpatch .Version }}-next"
 archives:
   - format: binary
 release:
-  draft: true
+  draft: false
+  mode: append
   extra_files:
     - glob: ./deployments/cosign.pub
-  ids:
-    -
+  footer: |
+    ## Docker images
+    - `docker pull wiliansilvazup/horusec-operator:{{ .Tag }}`
+
+    **Full Changelog**: https://github.com/ZupIT/horusec-operator/compare/{{ .PreviousTag }}...{{ .Tag }}
+
 signs:
   - cmd: cosign
     stdin: '{{ .Env.COSIGN_PWD }}'
@@ -57,15 +87,15 @@ dockers:
     ids:
       - horusec-operator
   - image_templates:
-      - "horuszup/horusec-operator:{{ .Tag }}"
-    skip_push: false
+      - "wiliansilvazup/horusec-operator:{{ .Tag }}"
+    skip_push: "false"
     dockerfile: ./deployments/dockerfiles/Dockerfile.gorelease
   - image_templates:
-      - "horuszup/horusec-operator:latest"
+      - "wiliansilvazup/horusec-operator:latest"
     skip_push: auto
     dockerfile: ./deployments/dockerfiles/Dockerfile.gorelease
   - image_templates:
-      - "horuszup/horusec-operator:v{{ .Major }}"
+      - "wiliansilvazup/horusec-operator:v{{ .Major }}"
     skip_push: auto
     dockerfile: ./deployments/dockerfiles/Dockerfile.gorelease
     use: docker

Makefile

@@ -9,7 +9,7 @@ CONTROLLER_GEN ?= $(shell pwd)/bin/controller-gen
 KUSTOMIZE ?= $(shell pwd)/bin/kustomize
 CRD_OPTIONS ?= "crd:trivialVersions=true,preserveUnknownFields=false"
 OPERATOR_VERSION ?= $(shell curl -sL https://api.github.com/repos/ZupIT/horusec-operator/releases/latest | jq -r ".tag_name") # Get the latest version of the operator
-REGISTRY_IMAGE ?= horuszup/horusec-operator:${OPERATOR_VERSION}
+REGISTRY_IMAGE ?= wiliansilvazup/horusec-operator:${OPERATOR_VERSION}
 ADDLICENSE ?= addlicense
 GO_GCI ?= gci
 GO_FUMPT ?= gofumpt

api/v2alpha1/component_analytic.go

@@ -90,7 +90,7 @@ func (h *HorusecPlatform) GetAnalyticRegistry() string {
 func (h *HorusecPlatform) GetAnalyticRepository() string {
 	repository := h.GetAnalyticComponent().Container.Image.Repository
 	if repository == "" {
-		return "horuszup/horusec-analytic"
+		return "wiliansilvazup/horusec-analytic"
 	}
 	return repository
 }

api/v2alpha1/component_api.go

@@ -89,7 +89,7 @@ func (h *HorusecPlatform) GetAPIRegistry() string {
 func (h *HorusecPlatform) GetAPIRepository() string {
 	repository := h.GetAPIComponent().Container.Image.Repository
 	if repository == "" {
-		return "horuszup/horusec-api"
+		return "wiliansilvazup/horusec-api"
 	}
 	return repository
 }

api/v2alpha1/component_auth.go

@@ -95,7 +95,7 @@ func (h *HorusecPlatform) GetAuthRegistry() string {
 func (h *HorusecPlatform) GetAuthRepository() string {
 	repository := h.GetAuthComponent().Container.Image.Repository
 	if repository == "" {
-		return "horuszup/horusec-auth"
+		return "wiliansilvazup/horusec-auth"
 	}
 	return repository
 }

api/v2alpha1/component_core.go

@@ -81,7 +81,7 @@ func (h *HorusecPlatform) GetCoreRegistry() string {
 func (h *HorusecPlatform) GetCoreRepository() string {
 	repository := h.GetCoreComponent().Container.Image.Repository
 	if repository == "" {
-		return "horuszup/horusec-core"
+		return "wiliansilvazup/horusec-core"
 	}
 	return repository
 }

api/v2alpha1/component_manager.go

@@ -81,7 +81,7 @@ func (h *HorusecPlatform) GetManagerRegistry() string {
 func (h *HorusecPlatform) GetManagerRepository() string {
 	repository := h.GetManagerComponent().Container.Image.Repository
 	if repository == "" {
-		return "horuszup/horusec-manager"
+		return "wiliansilvazup/horusec-manager"
 	}
 	return repository
 }

api/v2alpha1/component_messages.go

@@ -81,7 +81,7 @@ func (h *HorusecPlatform) GetMessagesRegistry() string {
 func (h *HorusecPlatform) GetMessagesRepository() string {
 	repository := h.GetMessagesComponent().Container.Image.Repository
 	if repository == "" {
-		return "horuszup/horusec-messages"
+		return "wiliansilvazup/horusec-messages"
 	}
 	return repository
 }