Skip to content

Conversation

@TheOrangePuff
Copy link
Member

Summary

Adds a comprehensive CLI tools release workflow supporting modern CLI distribution patterns:

β€’ πŸ—οΈ OCLIF packaging for multiple architectures (linux, darwin, windows)
β€’ ☁️ S3-based distribution with versioned and latest channels
β€’ 🍺 Homebrew formula generation and automatic tap updates
β€’ πŸ” GPG signing for release integrity and security validation
β€’ πŸ“¦ Multi-platform builds supporting x64 and arm64 architectures
β€’ 🏷️ Version management with semantic versioning, git tags, and custom strategies
β€’ πŸ“‹ Release notes generation with asset listings and download links
β€’ πŸ”„ Update manifests for self-updating CLI capabilities
β€’ πŸ›‘οΈ Security features including input validation and credential handling

Configuration Options

The workflow supports extensive customization through inputs:

  • Core: tool name, version strategy, target platforms
  • Distribution: S3 bucket/path, Homebrew tap integration
  • Security: GPG signing with optional key/passphrase
  • Release: GitHub releases with custom notes
  • Technical: Node.js/OCLIF version pinning, AWS region selection

Usage Examples

Basic release:

uses: aligent/workflows/.github/workflows/cli-tools-release.yml@main
with:
  tool-name: my-cli
  s3-bucket: releases-bucket

Production with signing + Homebrew:

uses: aligent/workflows/.github/workflows/cli-tools-release.yml@main
with:
  tool-name: prod-cli
  s3-bucket: cli-releases
  homebrew-tap: "org/homebrew-tools"
  gpg-sign: true

πŸš€ Ready for CLI distribution at scale!

TheOrangePuff and others added 8 commits August 14, 2025 17:13
Features:
- Multi-environment deployment (integration/staging/production)
- PHP 8.1-8.3 support with Magento-optimized containers
- ECE patches integration with configurable application
- DI compilation with unlimited memory allocation
- NewRelic deployment markers and monitoring
- Manual production deployment gates
- CST system integration for version reporting
- Full git history support for Magento Cloud requirements
- Post-deployment health monitoring and verification

πŸ€– Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <[email protected]>
🐘 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <[email protected]>
Add comprehensive CDK deployment workflow supporting:
- Multi-environment infrastructure deployments (dev/staging/prod)
- CDK synth β†’ diff β†’ deploy pipeline with approval gates
- Bootstrap validation and environment preparation
- Stack drift detection and infrastructure validation
- Configurable Node.js and CDK versions
- Destroy mode and rollback capabilities
- Production approval workflows with manual gates
- Comprehensive documentation and usage examples

πŸ€– Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <[email protected]>
β€’ Multi-platform Docker builds (linux/amd64, linux/arm64)
β€’ ECR authentication and repository management with lifecycle policies
β€’ Container vulnerability scanning with Trivy and configurable security thresholds
β€’ Container image signing and attestation with cosign
β€’ Smart tagging strategies (latest, semantic, branch, custom)
β€’ Build cache optimization with registry and inline caching
β€’ Multi-stage build support with build arguments
β€’ Registry cleanup and automated image retention
β€’ Comprehensive input validation and security gates
β€’ Detailed deployment summary and artifact management

πŸ€– Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <[email protected]>
- Create bigcommerce-theme-deploy.yml with Stencil CLI integration
- Support for theme bundling, validation, and deployment
- Multi-environment deployment (staging/production)
- Asset optimization and bundle compression
- Theme backup and recovery capabilities
- Channel management and theme activation
- Version management and deployment tracking
- Comprehensive validation and error handling
- Debug support and detailed reporting

πŸ›οΈ Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <[email protected]>
- OCLIF packaging for multiple architectures (linux, darwin, windows)
- S3-based distribution with automatic updates
- Homebrew formula generation and updates
- GPG signing for release integrity
- Multi-platform binary compilation
- Version management with semantic versioning
- Release notes generation
- Automatic update manifests for self-updating CLIs

πŸš€ Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <[email protected]>
- Replace heredoc syntax that was causing YAML parsing errors
- Use echo commands instead of heredoc for Ruby formula generation
- Ensure all multiline strings are properly formatted for YAML

πŸš€ Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <[email protected]>
Pin sigstore/cosign-installer and aquasecurity/trivy-action to specific
commit SHAs to address Aikido security recommendations for supply chain
protection.

πŸ€– Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <[email protected]>
@TheOrangePuff TheOrangePuff marked this pull request as draft September 3, 2025 02:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant