#!/usr/bin/python3 """ Creates Github Releases and uploads assets """ import argparse import logging import os import hashlib from github import Github, GithubException, UnknownObjectException FORMAT = "%(levelname)s - %(asctime)s: %(message)s" logging.basicConfig(format=FORMAT) CLOUDFLARED_REPO = os.environ.get("GITHUB_REPO", "cloudflare/cloudflared") GITHUB_CONFLICT_CODE = "already_exists" def get_sha256(filename): """ get the sha256 of a file """ sha256_hash = hashlib.sha256() with open(filename,"rb") as f: for byte_block in iter(lambda: f.read(4096),b""): sha256_hash.update(byte_block) return sha256_hash.hexdigest() def update_or_add_message(msg, name, sha): """ updates or builds the github version message for each new asset's sha256. Searches the existing message string to update or create. """ new_text = '{0}: {1}\n'.format(name, sha) start = msg.find(name) if (start != -1): end = msg.find("\n", start) if (end != -1): return msg.replace(msg[start:end+1], new_text) back = msg.rfind("```") if (back != -1): return '{0}{1}```'.format(msg[:back], new_text) return '{0} \n### SHA256 Checksums:\n```\n {1}```'.format(msg, new_text) def assert_tag_exists(repo, version): """ Raise exception if repo does not contain a tag matching version """ tags = repo.get_tags() if not tags or tags[0].name != version: raise Exception("Tag {} not found".format(version)) def get_or_create_release(repo, version, dry_run=False): """ Get a Github Release matching the version tag or create a new one. If a conflict occurs on creation, attempt to fetch the Release on last time """ try: release = repo.get_release(version) logging.info("Release %s found", version) return release except UnknownObjectException: logging.info("Release %s not found", version) # We dont want to create a new release tag if one doesnt already exist assert_tag_exists(repo, version) if dry_run: logging.info("Skipping Release creation because of dry-run") return try: logging.info("Creating release %s", version) return repo.create_git_release(version, version, "") except GithubException as e: errors = e.data.get("errors", []) if e.status == 422 and any( [err.get("code") == GITHUB_CONFLICT_CODE for err in errors] ): logging.warning( "Conflict: Release was likely just made by a different build: %s", e.data, ) return repo.get_release(version) raise e def parse_args(): """ Parse and validate args """ parser = argparse.ArgumentParser( description="Creates Github Releases and uploads assets." ) parser.add_argument( "--api-key", default=os.environ.get("API_KEY"), help="Github API key" ) parser.add_argument( "--release-version", metavar="version", default=os.environ.get("VERSION"), help="Release version", ) parser.add_argument( "--path", default=os.environ.get("ASSET_PATH"), help="Asset path" ) parser.add_argument( "--name", default=os.environ.get("ASSET_NAME"), help="Asset Name" ) parser.add_argument( "--dry-run", action="store_true", help="Do not create release or upload asset" ) args = parser.parse_args() is_valid = True if not args.release_version: logging.error("Missing release version") is_valid = False if not args.path: logging.error("Missing asset path") is_valid = False if not args.name: logging.error("Missing asset name") is_valid = False if not args.api_key: logging.error("Missing API key") is_valid = False if is_valid: return args parser.print_usage() exit(1) def main(): """ Attempts to upload Asset to Github Release. Creates Release if it doesnt exist """ try: args = parse_args() client = Github(args.api_key) repo = client.get_repo(CLOUDFLARED_REPO) release = get_or_create_release(repo, args.release_version, args.dry_run) if args.dry_run: logging.info("Skipping asset upload because of dry-run") return release.upload_asset(args.path, name=args.name) # add the sha256 of the new artifact to the release message body pkg_hash = get_sha256(args.path) # update the release body text msg = update_or_add_message(release.body, args.name, pkg_hash) release.update_release(version, version, msg) except Exception as e: logging.exception(e) exit(1) main()