feat: use gh for auth

Author: marcelkottmann

.github/workflows/release-codon.yaml

@@ -54,6 +54,8 @@ jobs:
         uses: docker/build-push-action@v5
         with:
           context: release
+          secrets: |
+            "github_token=${{ secrets.GITHUB_TOKEN }}"
           file: release/codon/Dockerfile
           push: true
           load: true

release/codon/Dockerfile

@@ -21,5 +21,17 @@ RUN cd codon && cmake -S . -B build \
 RUN cd codon && cmake --build build --config Release
 RUN cd codon && cmake --install build --prefix=install
 
+# install gh cli
+RUN (type -p wget >/dev/null || (apt update && apt install wget -y)) \
+	&& mkdir -p -m 755 /etc/apt/keyrings \
+	&& out=$(mktemp) && wget -nv -O$out https://cli.github.com/packages/githubcli-archive-keyring.gpg \
+	&& cat $out | tee /etc/apt/keyrings/githubcli-archive-keyring.gpg > /dev/null \
+	&& chmod go+r /etc/apt/keyrings/githubcli-archive-keyring.gpg \
+	&& mkdir -p -m 755 /etc/apt/sources.list.d \
+	&& echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" | tee /etc/apt/sources.list.d/github-cli.list > /dev/null \
+	&& apt update \
+	&& apt install gh -y
+
 COPY codon/pack.sh pack.sh
-RUN chmod +x pack.sh && ./pack.sh
+RUN --mount=type=secret,id=github_token GH_TOKEN=$(cat /run/secrets/github_token) chmod +x pack.sh && ./pack.sh
+

release/codon/pack.sh

@@ -11,4 +11,6 @@ cp llvm-project/install/bin/llvm-objcopy release/armembeddon/bin/llvm-objcopy
 cp codon/install/bin/codon release/armembeddon/bin/codon
 cp -r codon/install/lib/codon/ release/armembeddon/lib/
 
-tar cvzf armembeddon.tar.gz -C release armembeddon
+tar cvzf armembeddon.tar.gz -C release armembeddon
+
+gh --version && gh auth status