openclaw-scan 0.1.1

Security scanner for agentic AI framework installations (OpenClaw, Claude Code, and compatible)
Documentation
name: Release

on:
  push:
    tags:
      - 'v[0-9]+.[0-9]+.[0-9]+'

env:
  CARGO_TERM_COLOR: always

jobs:
  build-release:
    name: Build ${{ matrix.target }}
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        include:
          - os: ubuntu-latest
            target: x86_64-unknown-linux-musl
            asset_name: ocls-linux-x86_64
          - os: ubuntu-latest
            target: aarch64-unknown-linux-musl
            asset_name: ocls-linux-aarch64
          - os: macos-latest
            target: x86_64-apple-darwin
            asset_name: ocls-macos-x86_64
          - os: macos-latest
            target: aarch64-apple-darwin
            asset_name: ocls-macos-aarch64

    steps:
      - uses: actions/checkout@v4

      - name: Install Rust stable
        uses: dtolnay/rust-toolchain@stable
        with:
          targets: ${{ matrix.target }}

      - name: Install cross (Linux musl)
        if: contains(matrix.target, 'linux')
        run: cargo install cross --locked

      - name: Build release (Linux)
        if: contains(matrix.target, 'linux')
        run: cross build --release --target ${{ matrix.target }}

      - name: Build release (macOS)
        if: contains(matrix.target, 'apple')
        run: cargo build --release --target ${{ matrix.target }}

      - name: Rename binary
        run: |
          mkdir -p dist
          cp target/${{ matrix.target }}/release/ocls dist/${{ matrix.asset_name }}

      - name: Upload release asset
        uses: softprops/action-gh-release@v2
        with:
          files: dist/${{ matrix.asset_name }}
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

  publish-crate:
    name: Publish to crates.io
    runs-on: ubuntu-latest
    needs: build-release
    steps:
      - uses: actions/checkout@v4

      - name: Install Rust stable
        uses: dtolnay/rust-toolchain@stable

      - name: Publish
        run: cargo publish --token ${{ secrets.CARGO_REGISTRY_TOKEN }}