componentize-qjs-cli 0.2.0

CLI for converting JavaScript to WebAssembly components using QuickJS
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154

name: Publish runtime Wasm

on:
  push:
    tags:
      - v*
  workflow_dispatch:
    inputs:
      release_tag:
        description: Release tag to build from
        required: false
        type: string
  workflow_call:
    inputs:
      release_tag:
        description: Release tag to build from
        required: true
        type: string

env:
  CARGO_TERM_COLOR: always
  RELEASE_TAG: ${{ inputs.release_tag || github.ref_name }}
  IMAGE_NAME: ${{ github.repository }}
  COMPONENT_NAME: componentize-qjs-runtime
  COMPONENT_NAME_OPT_SIZE: componentize-qjs-runtime-opt-size
  COMPONENT_DESCRIPTION: QuickJS runtime for componentize-qjs
  COMPONENT_DESCRIPTION_OPT_SIZE: QuickJS runtime for componentize-qjs optimized for size
  COMPONENT_SOURCE: https://github.com/${{ github.repository }}
  COMPONENT_HOMEPAGE: https://github.com/${{ github.repository }}
  COMPONENT_LICENSES: Apache-2.0
  WASM_FILE: dist/componentize_qjs_runtime.wasm
  WASM_FILE_OPT_SIZE: dist/componentize_qjs_runtime_opt_size.wasm
  SBOM_FILE: dist/componentize_qjs_runtime.wasm.cdx.json
  SBOM_FILE_OPT_SIZE: dist/componentize_qjs_runtime_opt_size.wasm.cdx.json

jobs:
  build:
    name: Build runtime Wasm
    runs-on: ubuntu-latest
    outputs:
      version: ${{ steps.version.outputs.version }}
    permissions:
      contents: read

    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          ref: ${{ env.RELEASE_TAG }}

      - name: Install Rust
        uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
        with:
          targets: wasm32-wasip2

      - name: Install cargo-binstall
        uses: cargo-bins/cargo-binstall@4852a15cf01e4f33958ce547326406fe78f27c38 # v1.19.0

      - name: Cache cargo
        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1

      - name: Compute runtime version
        id: version
        shell: bash
        run: |
          version="${RELEASE_TAG#v}"
          test -n "$version" || { echo "ERROR: release tag is empty"; exit 1; }
          echo "version=${version}" >> "$GITHUB_OUTPUT"

      - name: Install build tools
        run: |
          cargo binstall cargo-auditable --force
          cargo binstall auditable2cdx --force

      - name: Build auditable runtime
        shell: bash
        run: |
          bash .github/scripts/prepare-runtime-artifacts.sh \
            target/runtime-publish \
            dist \
            runtime.wasm=componentize_qjs_runtime.wasm \
            runtime-opt-size.wasm=componentize_qjs_runtime_opt_size.wasm

      - name: Upload runtime artifacts
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: componentize-qjs-runtime
          path: |
            ${{ env.WASM_FILE }}
            ${{ env.WASM_FILE }}.sha256
            ${{ env.SBOM_FILE }}
            ${{ env.WASM_FILE_OPT_SIZE }}
            ${{ env.WASM_FILE_OPT_SIZE }}.sha256
            ${{ env.SBOM_FILE_OPT_SIZE }}
          if-no-files-found: error

  publish:
    name: Publish ${{ matrix.runtime }} runtime (${{ matrix.channel }})
    if: github.event_name != 'workflow_dispatch'
    needs: build
    runs-on: ubuntu-latest
    permissions:
      actions: read
      id-token: write
      packages: write
      contents: read
    strategy:
      fail-fast: false
      matrix:
        runtime: [default, opt-size]
        channel: [versioned, latest]

    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          ref: ${{ env.RELEASE_TAG }}

      - name: Download runtime artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: componentize-qjs-runtime
          path: dist

      - name: Install Rust
        uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable

      - name: Install cargo-binstall
        uses: cargo-bins/cargo-binstall@4852a15cf01e4f33958ce547326406fe78f27c38 # v1.19.0

      - name: Install wkg
        run: cargo binstall wkg --force

      - name: Login to GitHub Container Registry
        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ github.token }}

      - name: Install cosign
        uses: sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 # v4.1.1

      - name: Publish runtime
        uses: ./.github/actions/publish-runtime
        with:
          file: ${{ matrix.runtime == 'default' && env.WASM_FILE || env.WASM_FILE_OPT_SIZE }}
          sbom-file: ${{ matrix.runtime == 'default' && env.SBOM_FILE || env.SBOM_FILE_OPT_SIZE }}
          oci-reference-without-tag: ghcr.io/${{ env.IMAGE_NAME }}/${{ matrix.runtime == 'default' && env.COMPONENT_NAME || env.COMPONENT_NAME_OPT_SIZE }}
          version: ${{ matrix.channel == 'versioned' && needs.build.outputs.version || 'latest' }}
          description: ${{ matrix.runtime == 'default' && env.COMPONENT_DESCRIPTION || env.COMPONENT_DESCRIPTION_OPT_SIZE }}
          source: ${{ env.COMPONENT_SOURCE }}
          homepage: ${{ env.COMPONENT_HOMEPAGE }}
          licenses: ${{ env.COMPONENT_LICENSES }}