5151 chmod +x ./.github/scripts/update_cli.sh
5252 ./.github/scripts/update_cli.sh ${{ inputs.cliTag }}
5353
54+ - name : Extract CLI version
55+ id : extract_cli_version
56+ run : |
57+ CLI_VERSION=$(./src/main/resources/cx-linux version | grep -Eo '^[0-9]+\.[0-9]+\.[0-9]+')
58+ echo "CLI version being packed is $CLI_VERSION"
59+ echo "CLI_VERSION=$CLI_VERSION" >> $GITHUB_ENV
60+ echo "::set-output name=CLI_VERSION::$CLI_VERSION"
61+
62+ - name : Check if CLI version is latest
63+ if : ${{ github.event.inputs.dev == 'false' && !github.event.inputs.cliTag && github.ref == 'refs/heads/main' }}
64+ id : check_latest_cli_version
65+ run : |
66+ LATEST_CLI_VERSION=$(curl -s https://api.github.com/repos/Checkmarx/ast-cli/releases/latest | grep '"tag_name":' | sed -E 's/.*"([^"]+)".*/\1/')
67+ echo "CLI_VERSION=[$CLI_VERSION]"
68+ echo "LATEST_CLI_VERSION=[$LATEST_CLI_VERSION]"
69+ echo "Latest CLI version from GitHub: $LATEST_CLI_VERSION"
70+ if [ "$CLI_VERSION" = "$LATEST_CLI_VERSION" ]; then
71+ echo "CLI_VERSION ($CLI_VERSION) matches the latest released version ($LATEST_CLI_VERSION). Proceeding."
72+ else
73+ echo "CLI_VERSION ($CLI_VERSION) does not match the latest released version ($LATEST_CLI_VERSION). Failing workflow."
74+ exit 1
75+ fi
76+
5477 - name : Tag
5578 id : set_tag_name
5679 run : |
77100 with :
78101 java-version : ' 11'
79102 distribution : ' temurin'
80- server-id : ossrh
103+ server-id : central
81104 server-username : MAVEN_USERNAME
82105 server-password : MAVEN_PASSWORD
83106 gpg-private-key : ${{ secrets.MAVEN_GPG_PRIVATE_KEY }}
@@ -94,14 +117,6 @@ jobs:
94117 fi
95118 echo "AID_PROP=${prop}" >> $GITHUB_ENV
96119
97- - name : Extract CLI version
98- id : extract_cli_version
99- run : |
100- CLI_VERSION=$(./src/main/resources/cx-linux version | grep -Eo '^[0-9]+\.[0-9]+\.[0-9]+')
101- echo "CLI version being packed is $CLI_VERSION"
102- echo "CLI_VERSION=$CLI_VERSION" >> $GITHUB_ENV
103- echo "::set-output name=CLI_VERSION::$CLI_VERSION"
104-
105120 - name : Publish package
106121 run : mvn --batch-mode deploy -DskipTests ${{ env.AID_PROP }}
107122 env :
@@ -138,4 +153,4 @@ jobs:
138153 cli_version : ${{ needs.release.outputs.CLI_VERSION }}
139154 is_cli_release : false
140155 is_java_release : true
141- secrets : inherit
156+ secrets : inherit
0 commit comments