added github workflow

.github/workflows/publish.yml

@@ -0,0 +1,56 @@
+name: Publish
+on:
+  # Enable manual run
+  workflow_dispatch:
+  push:
+    tags:
+      - "*.*"
+env:
+  pkg_name: step-builder
+jobs:
+  create-build:
+    name: Create ${{ matrix.target }} build
+    runs-on: ${{ matrix.os }}
+    # softprops/action-gh-release needs this permission
+    permissions:
+      contents: write
+
+    strategy:
+      # Disable fail-fast as we want results from all even if one fails.
+      fail-fast: false
+      matrix:
+        include:
+          - os: ubuntu-latest
+            target: linux
+            build_path: build/distributions
+
+    steps:
+      - name: Install JDK 17
+        uses: actions/setup-java@v4
+        with:
+          distribution: "zulu"
+          java-version: "17"
+
+      - name: Checkout Code
+        uses: actions/checkout@v4
+
+      - name: Set Up Gradle
+        uses: gradle/actions/setup-gradle@v3
+        with:
+          gradle-version: '8.10.2'
+
+      # Build the project
+      - name: Build and Sign Plugin
+        env:
+          CERTIFICATE_CHAIN: ${{ secrets.JETBRAINS_CERT_CHAIN }}
+          PRIVATE_KEY: ${{ secrets.JETBRAINS_PRIVATE_KEY }}
+          PRIVATE_KEY_PASSWORD: ${{ secrets.JETBRAINS_PRIVATE_KEY_PASSWORD }}
+        run: ./gradlew clean buildPlugin signPlugin
+
+      - name: Add packaged build to release draft
+        uses: softprops/action-gh-release@v2
+        if: startsWith(github.ref, 'refs/tags/')
+        with:
+          draft: false
+          files: build/distributions/*.zip
+          token: ${{ secrets.STEP_BUILDER_RELEASE_KEY }}

build.gradle.kts

@@ -5,7 +5,7 @@ plugins {
 }
 
 group = "com.padya"
-version = "1.0-SNAPSHOT"
+version = "1.0"
 
 repositories {
   mavenCentral()
@@ -36,12 +36,8 @@ tasks {
   }
 
   signPlugin {
-    certificateChainFile.set(file("certificate/chain.crt"))
-    privateKeyFile.set(file("certificate/private.pem"))
-    password.set(providers.environmentVariable("STEP_BUILDER_PRIVATE_KEY_PASSWORD"))
-  }
-
-  publishPlugin {
-    token.set(System.getenv("PUBLISH_TOKEN"))
+    certificateChain.set(providers.environmentVariable("CERTIFICATE_CHAIN"))
+    privateKey.set(providers.environmentVariable("PRIVATE_KEY"))
+    password.set(providers.environmentVariable("PRIVATE_KEY_PASSWORD"))
   }
 }

certificates/chain.crt

@@ -1,7 +1,7 @@
 -----BEGIN CERTIFICATE-----
-MIIFWzCCA0OgAwIBAgIUYAkHsnmiv4mLfn1j3RdhkXdxG/4wDQYJKoZIhvcNAQEL
+MIIFWzCCA0OgAwIBAgIUT1Ew8+Av/L5HImhcmiDmW/HBZvMwDQYJKoZIhvcNAQEL
 BQAwPTELMAkGA1UEBhMCSU4xCzAJBgNVBAgMAkFQMSEwHwYDVQQKDBhJbnRlcm5l
-dCBXaWRnaXRzIFB0eSBMdGQwHhcNMjQxMTE5MTcwNTI4WhcNMjUxMTE5MTcwNTI4
+dCBXaWRnaXRzIFB0eSBMdGQwHhcNMjQxMTE5MTgxNDU4WhcNNDYxMDE1MTgxNDU4
 WjA9MQswCQYDVQQGEwJJTjELMAkGA1UECAwCQVAxITAfBgNVBAoMGEludGVybmV0
 IFdpZGdpdHMgUHR5IEx0ZDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
 AKtzBZDPV2cCWQ86RqdYKpakaw8hFqbkXKmawQpSJT8RJZVG7VDDa1UPJi72ttl9
@@ -16,16 +16,16 @@ WzJ91dnJWGx2XtRCECOG82DdlKUhyTGhMv6S7hP2eT2sj9ZzwBkbDtRjBgBhIqQ8
 j3VNt9Gz6oaf0dV3fI9z3huGyo4YENmnLdAvPTvBFSSoC1xiJ39+DEsKek7NhI5j
 bxOpvd/zaOY/gQQewLUA/nBrG9c/q1/LpPZHLZkYCsazAgMBAAGjUzBRMB0GA1Ud
 DgQWBBQawJEvZc0X/qnjL9DocqYsiaIKizAfBgNVHSMEGDAWgBQawJEvZc0X/qnj
-L9DocqYsiaIKizAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4ICAQBs
-ObnKCSYAhBWlutmDgyTQrtqM0fV3zXxAS4sVu1pIvYwHEB4E6QNGceUk+apb6ep3
-SPjL9ktPmz8e5y7KP6uXt/BNVuMfnEFOm5zORC5YeGAiVDnJfpmHpfP+vDLmORcK
-g8jCaA5VerQ1qmpG8BKBFrArc17MzjweL1SS42dPEl6QWH/BQ/SQxZFwOSk3cdKy
-8kxYRUjEr0ftNf23SzJGA37tiqeDSx75OC5BIyM4MLNFuDFcXMP8DGQeeLUCTwY1
-cKXxEdSAbJOE1fT4m0vy3aTWNWrl/q3SO+u8outqmYNGBtKFJaI1Kvz5R09p34AH
-EakapvcUJyIGz7mTv/z89XkoP+a5oec4mUouVyXz4dl8Ow7TIoywRRJ37iNmjALE
-FXzK4uyKCJRZnVZ3FO2eIXv93w1tJ3GGSc0vopfPzawOsUKIj6WJaCRC7xaJmlWh
-CmokymbIdCbtj4ND1v/A49hjceVdhZBbl/as/d5iJ7H0eFssdFTnvFto7JvZboV0
-kO9vsU1CPwJjmGCGvmFVFvIoTVA6xIRskkV6m5WiccWcbFHhvdcAQbi/gxsfqec6
-ozSjthVG8BMaHoQGbU2C69Ewo13Rjeaf+LGxQu+cK6VfTKHNldZ5tbITv6DcCBnm
-zkrl15XHdPD8wYnvZHLOQu/bzBZltWitHfQIv6kIEA==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 -----END CERTIFICATE-----