kagami-cli 0.2.0

This simple tool checks whether there are any publicly disclosed vulnerabilities in a list of defined software.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99

name: GitHub Release

on:
  workflow_dispatch:

permissions:
  contents: read

env:
  CARGO_TERM_COLOR: always

jobs:
  version:
    runs-on: ubuntu-latest
    outputs:
      version: ${{ steps.version.outputs.version }}
    steps:
      - name: Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
      # The version in Cargo.toml will be used as git tag name.
      - name: Read version
        id: version
        run: |
          version=$(yq -p toml -oy -e '.package.version' Cargo.toml)
          echo "version=$version" >> "$GITHUB_OUTPUT"

  build:
    needs: version
    runs-on: ${{ matrix.job.os }}
    defaults:
      run:
        # PowerShell, the default on Windows, does not stop at a failing command.
        shell: bash
    strategy:
      fail-fast: false
      matrix:
        job:
          - { os: ubuntu-latest  , target: x86_64-unknown-linux-gnu       , use-cross: false , extension: "" }
          - { os: ubuntu-latest  , target: aarch64-unknown-linux-gnu      , use-cross: true  , extension: "" }
          - { os: macos-latest   , target: x86_64-apple-darwin            , use-cross: false , extension: "" }
          - { os: macos-latest   , target: aarch64-apple-darwin           , use-cross: false , extension: "" }
          - { os: windows-latest , target: x86_64-pc-windows-msvc         , use-cross: false , extension: .exe }
    steps:
      - name: Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
      - name: Setup rust toolchain
        run: |
          rustup toolchain install
          rustup target add ${{ matrix.job.target }}
      - uses: taiki-e/install-action@a4d3f3f761dcd95cce1b72cb61cb6d1963438177 # v2.87.30
        if: matrix.job.use-cross == true
        with:
          tool: cross
      - name: Build
        if: matrix.job.use-cross == false
        run: cargo build --release --locked --target ${{ matrix.job.target }}
      - name: Build(cross)
        if: matrix.job.use-cross == true
        run: cross build --release --locked --target ${{ matrix.job.target }}
      - name: Rename artifacts
        run: |
          mv target/${{ matrix.job.target }}/release/kagami${{ matrix.job.extension }} kagami-$VERSION-${{ matrix.job.target }}${{ matrix.job.extension }}
        env:
          VERSION: ${{ needs.version.outputs.version }}
      - name: Upload artifacts
        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
        with:
          name: kagami-${{ matrix.job.target }}
          path: kagami-${{ needs.version.outputs.version }}-${{ matrix.job.target }}${{ matrix.job.extension }}
          if-no-files-found: error

  release:
    needs: [version, build]
    runs-on: ubuntu-latest
    # The environment only accepts runs from main.
    environment: crates-io-release
    permissions:
      contents: write # For action-gh-release to create the tag and the release
    steps:
      - name: Download artifacts
        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
        with:
          pattern: kagami-*
          path: artifacts
          merge-multiple: true
      - name: Release
        uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3.0.3
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          tag_name: ${{ needs.version.outputs.version }}
          # A new tag is created on the commit that was built.
          target_commitish: ${{ github.sha }}
          files: artifacts/*
          fail_on_unmatched_files: true