LedgerHQ · ldg-github-ci · Sep 19, 2024 · Sep 20, 2024 · Sep 20, 2024
diff --git a/.changeset/blue-boats-drop.md b/.changeset/blue-boats-drop.md
diff --git a/.changeset/blue-pandas-wash.md b/.changeset/blue-pandas-wash.md
diff --git a/.changeset/brave-squids-obey.md b/.changeset/brave-squids-obey.md
diff --git a/.changeset/brown-lizards-juggle.md b/.changeset/brown-lizards-juggle.md
diff --git a/.changeset/chatty-bats-sleep.md b/.changeset/chatty-bats-sleep.md
diff --git a/.changeset/chatty-kings-attend.md b/.changeset/chatty-kings-attend.md
diff --git a/.changeset/chatty-mice-hear.md b/.changeset/chatty-mice-hear.md
diff --git a/.changeset/chatty-waves-live.md b/.changeset/chatty-waves-live.md
diff --git a/.changeset/cuddly-gifts-repeat.md b/.changeset/cuddly-gifts-repeat.md
diff --git a/.changeset/cuddly-impalas-sing.md b/.changeset/cuddly-impalas-sing.md
diff --git a/.changeset/gentle-apples-help.md b/.changeset/gentle-apples-help.md
diff --git a/.changeset/gentle-experts-impress.md b/.changeset/gentle-experts-impress.md
diff --git a/.changeset/gentle-zebras-raise.md b/.changeset/gentle-zebras-raise.md
diff --git a/.changeset/good-oranges-move.md b/.changeset/good-oranges-move.md
diff --git a/.changeset/happy-lions-eat.md b/.changeset/happy-lions-eat.md
diff --git a/.changeset/hip-teachers-punch.md b/.changeset/hip-teachers-punch.md
diff --git a/.changeset/hot-cheetahs-wonder.md b/.changeset/hot-cheetahs-wonder.md
diff --git a/.changeset/hungry-parents-chew.md b/.changeset/hungry-parents-chew.md
diff --git a/.changeset/khaki-roses-cover.md b/.changeset/khaki-roses-cover.md
diff --git a/.changeset/late-flies-smile.md b/.changeset/late-flies-smile.md
diff --git a/.changeset/light-timers-lie.md b/.changeset/light-timers-lie.md
diff --git a/.changeset/lucky-keys-explode.md b/.changeset/lucky-keys-explode.md
diff --git a/.changeset/nervous-phones-cross.md b/.changeset/nervous-phones-cross.md
diff --git a/.changeset/new-guests-judge.md b/.changeset/new-guests-judge.md
diff --git a/.changeset/nine-cycles-clean.md b/.changeset/nine-cycles-clean.md
diff --git a/.changeset/ninety-shirts-beg.md b/.changeset/ninety-shirts-beg.md
diff --git a/.changeset/odd-ties-count.md b/.changeset/odd-ties-count.md
diff --git a/.changeset/old-ads-deny.md b/.changeset/old-ads-deny.md
diff --git a/.changeset/old-cups-cheat.md b/.changeset/old-cups-cheat.md
diff --git a/.changeset/proud-flies-type.md b/.changeset/proud-flies-type.md
diff --git a/.changeset/proud-turtles-tease.md b/.changeset/proud-turtles-tease.md
diff --git a/.changeset/rare-tips-stare.md b/.changeset/rare-tips-stare.md
diff --git a/.changeset/real-crews-switch.md b/.changeset/real-crews-switch.md
diff --git a/.changeset/rotten-bobcats-dance.md b/.changeset/rotten-bobcats-dance.md
diff --git a/.changeset/rude-ads-kick.md b/.changeset/rude-ads-kick.md
diff --git a/.changeset/selfish-months-decide.md b/.changeset/selfish-months-decide.md
diff --git a/.changeset/serious-snails-deny.md b/.changeset/serious-snails-deny.md
diff --git a/.changeset/seven-beans-poke.md b/.changeset/seven-beans-poke.md
diff --git a/.changeset/silent-apes-protect.md b/.changeset/silent-apes-protect.md
diff --git a/.changeset/sixty-hotels-cheat.md b/.changeset/sixty-hotels-cheat.md
diff --git a/.changeset/slow-eggs-act.md b/.changeset/slow-eggs-act.md
diff --git a/.changeset/strong-terms-brake.md b/.changeset/strong-terms-brake.md
diff --git a/.changeset/tall-hairs-cheer.md b/.changeset/tall-hairs-cheer.md
diff --git a/.changeset/tall-rockets-mate.md b/.changeset/tall-rockets-mate.md
diff --git a/.changeset/thick-zoos-travel.md b/.changeset/thick-zoos-travel.md
diff --git a/.changeset/thin-socks-fold.md b/.changeset/thin-socks-fold.md
diff --git a/.changeset/tricky-grapes-count.md b/.changeset/tricky-grapes-count.md
diff --git a/.changeset/unlucky-pears-sort.md b/.changeset/unlucky-pears-sort.md
diff --git a/.changeset/violet-clouds-compete.md b/.changeset/violet-clouds-compete.md
diff --git a/.changeset/witty-dancers-boil.md b/.changeset/witty-dancers-boil.md
diff --git a/.changeset/witty-plums-search.md b/.changeset/witty-plums-search.md
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -7,6 +7,8 @@ on:
 
 env:
   FORCE_COLOR: "1"
+  # NPM_REGISTRY: jfrog.ledgerlabs.net/artifactory/api/npm/ldk-npm-prod-public
+  NPM_REGISTRY: jfrog.ledgerlabs.net/artifactory/api/npm/ldk-npm-sandbox-green
 
 permissions:
   id-token: write
@@ -34,8 +36,6 @@ jobs:
 
       - name: Setup npm config for JFrog
         env:
-          # NPM_REGISTRY: jfrog.ledgerlabs.net/artifactory/api/npm/ldk-npm-prod-public
-          NPM_REGISTRY: jfrog.ledgerlabs.net/artifactory/api/npm/ldk-npm-sandbox-green
           NPM_REGISTRY_TOKEN: ${{ steps.jfrog-login.outputs.oidc-token }}
         run: |
           cat << EOF | tee .npmrc
@@ -50,26 +50,39 @@ jobs:
         with:
           publish: pnpm release
           # to remove
+          title: "⚙️ (release) [NO-ISSUE]: Version packages"
+          commit: "⚙️ (release): Version packages"
           branch: feat/no-issue-jfrog-attest-sign-package
+          createGithubReleases: false
         env:
           GITHUB_TOKEN: ${{ secrets.CI_BOT_TOKEN }}
 
       - name: Download published packages to attest and sign
-        # if: steps.changesets.outputs.published == 'true'
+        if: steps.changesets.outputs.published == 'true'
         run: |
           # Extract package name
-          PACKAGE_NAME=${{ steps.changesets.outputs.publishedPackages }}
+          # output will be in the form of
+          # [{"name":"@ledgerhq/device-sdk-core","version":"0.4.0"}]
+          cat << EOF | tee published-packages.json
+          ${{ steps.changesets.outputs.publishedPackages }}
+          EOF
+          PACKAGE_NAME=$(cat published-packages.json | jq -r '.[0].name')
+          PACKAGE_VERSION=$(cat published-packages.json | jq -r '.[0].version')
 
-          echo $PACKAGE_NAME
-
-          mkdir dist
+          ls -al
+          # Create dist directory
+          mkdir -p dist
+          echo "https://${NPM_REGISTRY}/${PACKAGE_NAME}/-/${PACKAGE_NAME}-{PACKAGE_VERSION}.tgz"
+          curl -s --output dist/${PACKAGE_NAME}-{PACKAGE_VERSION}.tgz https://${NPM_REGISTRY}/${PACKAGE_NAME}/-/${PACKAGE_NAME}-{PACKAGE_VERSION}.tgz
+
+          ls -al dist
 
-      # - name: Attest tarball
-      #   if: steps.changesets.outputs.published == 'true'
-      #   uses: LedgerHQ/actions-security/actions/attest@actions/attest-1
-      #   with:
-      #     subject-path: ./dist
-      #     push-to-registry: true
+      - name: Attest tarball
+        if: steps.changesets.outputs.published == 'true'
+        uses: LedgerHQ/actions-security/actions/attest@actions/attest-1
+        with:
+          subject-path: ./dist
+          push-to-registry: true
 
       # - name: Sign tarball
       #   if: steps.changesets.outputs.published == 'true'