commit-and-push.yml

name: add-file-and-commit

on:
  workflow_call:
    inputs:
      authorName:
        required: false
        type: string
        default: carvel-bot
      authorEmail:
        required: false
        type: string
        default: svc.bot.carvel@vmware.com
      repository:
        required: true
        type: string
      branch:
        required: false
        type: string
        default: develop
      artifactName:
        required: true
        type: string
        description: Name of the artifact or artifacts that will be added to the git repository
      artifactPath:
        required: false
        type: string
        description: Location in the repository where the artifacts will be downloaded to
        default: .
    secrets:
      githubToken:
        required: false
      githubDeployPrivateKey:
        required: false

jobs:
  commit-and-push:
    runs-on: ubuntu-latest
    environment: production
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          ref: ${{ inputs.branch }}
          persist-credentials: false
          repository: ${{ inputs.repository }}
      - name: Download artifacts to be added to the repository
        uses: actions/download-artifact@v4.1.7
        with:
          name: ${{ inputs.artifactName }}
          path: ${{ inputs.artifactPath }}
      - name: Commit & Push changes
        env:
          AUTHOR_NAME: ${{ inputs.authorName }}
          AUTHOR_EMAIL: ${{ inputs.authorEmail }}
          REPOSITORY: ${{ inputs.repository }}
          BRANCH: ${{ inputs.branch }}
          FORCE: false
          GITHUB_TOKEN: ${{ secrets.githubToken }}
          GITHUB_DEPLOY_PRIVATE_KEY: ${{ secrets.githubDeployPrivateKey }}
        run: |
          set -e
          
          timestamp=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
          
          AUTHOR_EMAIL=${AUTHOR_EMAIL:-'github-actions[bot]@users.noreply.github.com'}
          AUTHOR_NAME=${AUTHOR_NAME:-'github-actions[bot]'}
          MESSAGE=${MESSAGE:-"chore: autopublish ${timestamp}"}
          FORCE=${FORCE:-false}
          REPOSITORY=${REPOSITORY:-$GITHUB_REPOSITORY}
          
          echo "Push to branch $BRANCH";
          [ -z "${BRANCH}" ] && {
            echo 'Missing branch';
            exit 1;
          };
          
          if [ -z "${GITHUB_TOKEN}" ] && [ -z "${GITHUB_DEPLOY_PRIVATE_KEY}" ]; then
              echo 'Missing required input "github_token: ${{ secrets.GITHUB_TOKEN }} OR "github_deploy_private_key: ${{ secrets.GITHUB_DEPLOY_PRIVATE_KEY }}".';
              exit 1;
          fi
          
          if ${FORCE}; then
              _FORCE_OPTION='--force'
          fi
          
          remote_repo="https://${GITHUB_ACTOR}:${GITHUB_TOKEN}@github.com/${REPOSITORY}.git"
          
          if [ -n "${GITHUB_DEPLOY_PRIVATE_KEY}" ]; then
            remote_repo="git@github.com:${REPOSITORY}"
          
            tempkey=`basename $0`
            TMP_DEPLOY_PRIV_KEY=`mktemp /tmp/${tempkey}.XXXXXX` || exit 1
            echo "${GITHUB_DEPLOY_PRIVATE_KEY}" > $TMP_DEPLOY_PRIV_KEY
            eval $(ssh-agent -s)
            ssh-add ${TMP_DEPLOY_PRIV_KEY}
          fi
          
          git config http.sslVerify true
          git config --local user.email "${AUTHOR_EMAIL}"
          git config --local user.name "${AUTHOR_NAME}"
          
          git add -A
          
          git commit -m "${MESSAGE}" $_EMPTY || exit 0
          
          git push "${remote_repo}" HEAD:"${BRANCH}" --follow-tags $_FORCE_OPTION;