Attach a patch for needed updates to the TA Tasks

When the workflow fails it should attach a patch that folk can apply to
get the needed changes on their PR.

Reference: https://issues.redhat.com/browse/EC-769

.github/workflows/check-ta.yaml

@@ -10,4 +10,11 @@ jobs:
       - name: Check out code
         uses: actions/checkout@v4
       - name: Check Trusted Artifact variants
+        id: check
         run: hack/generate-ta-tasks.sh
+      - name: Attach patch
+        if: ${{ always() && steps.check.conclusion == 'failure' }}
+        uses: actions/upload-artifact@v4
+        with:
+          name: Trusted artifacts patch
+          path: ./ta.patch

hack/generate-ta-tasks.sh

@@ -8,7 +8,8 @@ set -o posix
 shopt -s globstar nullglob
 
 HACK_DIR="$(realpath "$(dirname "${BASH_SOURCE[0]}")")"
-TASK_DIR="$(realpath "${HACK_DIR}/../task")"
+ROOT_DIR="$(git rev-parse --show-toplevel)"
+TASK_DIR="$(realpath "${ROOT_DIR}/task")"
 
 if ! command -v tash &> /dev/null; then
   echo INFO: tash command is not available will download and use the latest version
@@ -56,6 +57,9 @@ done
 
 if [[ ${changes} -gt 0 ]]; then
   if [ "${GITHUB_ACTIONS:-false}" == "true" ]; then
+    # shellcheck disable=SC2016
+    echo '::notice title=Apply the attached patch::Download the attached `ta.patch` file and run `git apply ta.patch`'
+    git diff -u | tee "${ROOT_DIR}/ta.patch"
     exit 1
   else
     printf "INFO: \033[1mMake sure to include the regenerated files in your changeset\033[0m\n"