Hackman238/pyShodan

name: Python package

on:
  push:
    tags:
      - 'package*'
  workflow_dispatch:

jobs:
  prepare:
    runs-on: ubuntu-latest
    outputs:
      new_version: ${{ steps.version.outputs.new_version }}
    
    steps:
    - uses: actions/checkout@v2
    
    - name: Extract and increment version using sed and awk
      id: increment_version
      run: |
        version=$(sed -n "s/^ *version=['\"]\([^'\"]*\)['\"],/\1/p" setup.py)
        new_version=$(echo $version | awk -F. -v OFS=. '{$NF += 1; print}')
        sed -i "s;$version;$new_version;g" setup.py
        echo "new_version=$new_version" >> $GITHUB_ENV

    - name: Get last commit details
      id: last_commit
      run: |
        commit_message=$(git log -1 --pretty=%B)
        commit_author=$(git log -1 --pretty=%an)
        echo "commit_message=$commit_message" >> $GITHUB_ENV
        echo "commit_author=$commit_author" >> $GITHUB_ENV

    - name: Update ChangeLog
      run: |
        echo "## v${{ env.new_version }} - $(date +'%Y-%m-%d')" >> ChangeLog.md
        echo "- Last commit by ${{ env.commit_author }}: ${{ env.commit_message }}" >> ChangeLog.md
    
    - name: Commit and push changes
      run: |
        git config --local user.email "action@github.com"
        git config --local user.name "GitHub Action"
        git add setup.py ChangeLog.md
        git commit -m "Bump version to ${{ env.new_version }} and update ChangeLog"
        git push


  build:
    needs: prepare
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        python-version: [3.11]
        os: [ubuntu-latest]

    steps:
    - uses: actions/checkout@v3
    - name: Set up Python ${{ matrix.python-version }}
      uses: actions/setup-python@v3
      with:
        python-version: ${{ matrix.python-version }}

    - name: Install dependencies
      run: |
        python -m pip install --upgrade pip
        python -m pip install flake8 semgrep setuptools wheel build twine
        if [ -f requirements.txt ]; then pip install -r requirements.txt; fi

    - name: Lint with flake8
      run: |
        flake8 . --count --select=E9,F63,F7,F82 --show-source --statistics
        flake8 . --count --exit-zero --max-complexity=10 --max-line-length=128 --statistics

    - name: Security scan with Semgrep
      run: |
        semgrep --config=p/r2c

    - name: Patch version using sed and awk (not because we can't pull the commited update in prepare)
      run: |
        version=$(sed -n "s/^ *version=['\"]\([^'\"]*\)['\"],/\1/p" setup.py)
        new_version=$(echo $version | awk -F. -v OFS=. '{$NF += 1; print}')
        sed -i "s;$version;$new_version;g" setup.py

    - name: Build the package
      run: python setup.py sdist bdist_wheel

    - name: Build and publish
      if: success()
      run: |
        twine upload dist/*
      env:
        TWINE_USERNAME: __token__
        TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}

    - name: Upload artifacts
      if: success()
      uses: actions/upload-artifact@v4
      with:
        name: dist-${{ matrix.python-version }}-${{ matrix.os }}
        path: dist/*
        if-no-files-found: error
        retention-days: 90