release-eql.yml

name: "Release EQL"

on:
  release:
    types:
      - published
  pull_request: # runs everything but the last step
    branches:
      - main
    paths:
      - .github/workflows/release-eql.yml
  # Useful for debugging
  workflow_dispatch:

defaults:
  run:
    shell: bash -l {0}

permissions:
  contents: write

jobs:
  build-and-publish:
    runs-on: ubuntu-latest
    name: Build EQL
    if: ${{ github.event_name != 'release' || contains(github.event.release.tag_name, 'eql') }}
    timeout-minutes: 5

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Install asdf & tools
        uses: asdf-vm/actions/install@v3

      - name: Build EQL release
        run: |
          just build

      - name: Upload EQL artifacts
        uses: actions/upload-artifact@v4
        with:
          name: eql-release
          path: |
            release/cipherstash-encrypt.sql
            release/cipherstash-encrypt-uninstall.sql

      - name: Publish EQL release artifacts
        uses: softprops/action-gh-release@v2
        if: startsWith(github.ref, 'refs/tags/')
        with:
          files: |
            release/cipherstash-encrypt.sql
            release/cipherstash-encrypt-uninstall.sql