From 547ed30dc38f9edea2b282d7a5fe9d82b0b20d5b Mon Sep 17 00:00:00 2001
From: Nikola Jokic <jokicnikola07@gmail.com>
Date: Mon, 28 Aug 2023 10:15:08 +0200
Subject: [PATCH] Include sha256 checksums in releaseNotes (#98)

* Include sha256 checksums in releaseNotes

* Add ul for sha
---
 .github/workflows/release.yaml | 20 ++++++++++++++++----
 releaseNotes.md                |  7 +++++++
 2 files changed, 23 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index f95768b..a3d5bd2 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -12,6 +12,20 @@ jobs:
         name: Bootstrap the packages
       - run: npm run build-all
         name: Build packages
+      - name: Zip up releases
+        run: |
+          zip -r -j actions-runner-hooks-docker-${{ steps.releaseNotes.outputs.version }}.zip packages/docker/dist
+          zip -r -j actions-runner-hooks-k8s-${{ steps.releaseNotes.outputs.version }}.zip packages/k8s/dist
+      - name: Calculate SHA
+        id: sha
+        shell: bash
+        run: |
+          sha_docker=$(sha256sum actions-runner-hooks-docker-${{ steps.releaseNotes.outputs.version }}.zip | awk '{print $1}')
+          echo "Docker SHA: $sha_docker"
+          echo "docker-sha=$sha_docker" >> $GITHUB_OUTPUT
+          sha_k8s=$(sha256sum actions-runner-hooks-k8s-${{ steps.releaseNotes.outputs.version }}.zip | awk '{print $1}')
+          echo "K8s SHA: $sha_k8s"
+          echo "k8s-sha=$sha_k8s" >> $GITHUB_OUTPUT
       - uses: actions/github-script@v6
         id: releaseNotes
         with:
@@ -20,13 +34,11 @@ jobs:
             const fs = require('fs');
             const hookVersion = require('./package.json').version
             var releaseNotes = fs.readFileSync('${{ github.workspace }}/releaseNotes.md', 'utf8').replace(/<HOOK_VERSION>/g, hookVersion)
+            releaseNotes = releaseNotes.replace(/<DOCKER_SHA>/g, '${{ steps.sha.outputs.docker-sha }}')
+            releaseNotes = releaseNotes.replace(/<K8S_SHA>/g, '${{ steps.sha.outputs.k8s-sha }}')
             console.log(releaseNotes)
             core.setOutput('version', hookVersion);
             core.setOutput('note', releaseNotes);
-      - name: Zip up releases
-        run: |
-          zip -r -j actions-runner-hooks-docker-${{ steps.releaseNotes.outputs.version }}.zip packages/docker/dist
-          zip -r -j actions-runner-hooks-k8s-${{ steps.releaseNotes.outputs.version }}.zip packages/k8s/dist
       - uses: actions/create-release@v1
         id: createRelease
         name: Create ${{ steps.releaseNotes.outputs.version }} Hook Release
diff --git a/releaseNotes.md b/releaseNotes.md
index 573d94d..0480a22 100644
--- a/releaseNotes.md
+++ b/releaseNotes.md
@@ -4,3 +4,10 @@
 - Handle `$` symbols in environment variable names and values in k8s [#74]
 
 <!-- ## Misc -->
+
+## SHA-256 Checksums
+
+The SHA-256 checksums for the packages included in this build are shown below:
+
+- actions-runner-hooks-docker-<HOOK_VERSION>.zip <DOCKER_SHA>
+- actions-runner-hooks-k8s-<HOOK_VERSION>.zip <K8S_SHA>