azure-pim-cli 0.15.0

Unofficial CLI to list and enable Azure Privileged Identity Management (PIM) roles
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134

name: Build

on:
  push:
    branches: [ "main" ]
    tags: [ "*" ]
  pull_request:
    branches: [ "main" ]
  merge_group:

permissions: read-all

jobs:
  build:
    strategy:
      fail-fast: false
      matrix:
        include:
        - build: linux-musl
          os: ubuntu-24.04
          target: x86_64-unknown-linux-musl
        - build: ubuntu-24.04
          os: ubuntu-24.04
          target:
        - build: macos
          os: macos-latest
          target:
        - build: windows
          os: windows-latest
          target:
    runs-on: ${{ matrix.os }}
    steps:
    - uses: actions/checkout@v6
    - run: rustup update
    - run: rustup target add ${{ matrix.target }}
      if: ${{ matrix.target }}
    - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4
    - uses: baptiste0928/cargo-install@f204293d9709061b7bc1756fec3ec4e2cd57dec0
      with:
        crate: cargo-deny
    - uses: baptiste0928/cargo-install@f204293d9709061b7bc1756fec3ec4e2cd57dec0
      with:
        crate: typos-cli
    - uses: baptiste0928/cargo-install@f204293d9709061b7bc1756fec3ec4e2cd57dec0
      with:
        crate: cargo-deb
      if: matrix.build == 'ubuntu-24.04'
    - run: sudo apt-get install -y --no-install-recommends musl-tools
      shell: bash
      if: matrix.build == 'linux-musl'
    - run: eng/build.sh ${{ matrix.target }}
      shell: bash

    - uses: actions/upload-artifact@v7
      if: matrix.build == 'windows'
      with:
        name: ${{ matrix.build }}
        path: |
          target/x86_64-pc-windows-msvc/release/az-pim.exe
          target/x86_64-pc-windows-msvc/release/dump-roles.exe
        if-no-files-found: error

    - uses: actions/upload-artifact@v7
      if: matrix.build == 'macos'
      with:
        name: ${{ matrix.build }}
        path: |
          target/aarch64-apple-darwin/release/az-pim
          target/aarch64-apple-darwin/release/dump-roles
        if-no-files-found: error

    - uses: actions/upload-artifact@v7
      if: matrix.build == 'linux-musl'
      with:
        name: ${{ matrix.build }}
        path: |
          target/x86_64-unknown-linux-musl/release/az-pim
          target/x86_64-unknown-linux-musl/release/dump-roles
        if-no-files-found: error

    - uses: actions/upload-artifact@v7
      if: startsWith(matrix.build, 'ubuntu-')
      with:
        name: ${{ matrix.build }}
        path: target/x86_64-unknown-linux-gnu/debian/*.deb
        if-no-files-found: error


  release:
    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')
    needs: build
    permissions:
      contents: write
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - uses: actions/download-artifact@v8
        with:
          path: artifacts
      - run: find artifacts
      - name: Get the release version from the tag
        run: echo "VERSION=${{ github.ref_name }}" >> $GITHUB_ENV
      - name: show version
        run: |
          echo "version is: $VERSION"
      - name: Check that tag version and Cargo.toml version are the same
        shell: bash
        run: |
          if ! grep -q "version = \"$VERSION\"" Cargo.toml; then
            echo "version does not match Cargo.toml" >&2
            exit 1
          fi
      - name: rename artifacts
        run: |
          set -ex
          mv artifacts/macos/az-pim artifacts/macos/az-pim-macos-${VERSION}
          mv artifacts/macos/dump-roles artifacts/macos/dump-roles-macos-${VERSION}
          mv artifacts/windows/az-pim.exe artifacts/windows/az-pim-windows-${VERSION}.exe
          mv artifacts/windows/dump-roles.exe artifacts/windows/dump-roles-windows-${VERSION}.exe
          mv artifacts/linux-musl/az-pim artifacts/linux-musl/az-pim-linux-musl-${VERSION}
          mv artifacts/linux-musl/dump-roles artifacts/linux-musl/dump-roles-linux-musl-${VERSION}
          for ubuntu_rev in 24.04; do
            for file in artifacts/ubuntu-${ubuntu_rev}/*.deb; do
              mv "$file" "${file%.deb}_${ubuntu_rev}.deb"
            done
          done
          find artifacts
      - name: Create GitHub release
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          set -ex
          gh release create $VERSION --draft --verify-tag --title $VERSION
          gh release upload $VERSION $(find artifacts -type f)