azure-pipelines.yml

# Go
# Build your Go project.
# Add steps that test, save build artifacts, deploy, and more:
# https://docs.microsoft.com/azure/devops/pipelines/languages/go

trigger:
  branches:
    include:
      - '*'
      - refs/tags/*

pool:
  vmImage: ubuntu-latest

steps:
- task: DownloadSecureFile@1
  name: githubPEM
  displayName: 'Download Github PEM'
  inputs:
    secureFile: 'rp-azure-pipeline-github.pem'
- bash: |
    eval $(ruby -e "require 'openssl'; require 'jwt'; private_pem = File.read(ENV['GITHUB_PEM_PATH']); private_key = OpenSSL::PKey::RSA.new(private_pem); payload = { iat: Time.now.to_i - 60, exp: Time.now.to_i + (10 * 60), iss: ENV['GITHUB_APP_ID'] }; jwt = JWT.encode(payload, private_key, 'RS256'); puts 'PUSH_JWT='+jwt;")
    TOKEN=$(curl -s -X POST \
      -H "Authorization: Bearer $PUSH_JWT" \
      -H "Accept: application/vnd.github.v3+json" \
      https://api.github.com/app/installations/$GITHUB_APP_INSTALLATION_ID/access_tokens \
      | jq -r '.token')
      git remote add github https://x-access-token:$TOKEN@github.com/rocket-pool/$REPO_NAME
      git fetch github
      git push github HEAD:$(Build.SourceBranch) -f --verbose
      git push github HEAD:$(Build.SourceBranch) --tags --verbose
  displayName: 'Push to Github'
  env:
    GITHUB_PEM_PATH: $(githubPEM.secureFilePath)
    GITHUB_APP_ID: $(GITHUB_APP_ID)
    GITHUB_APP_INSTALLATION_ID: $(GITHUB_APP_INSTALLATION_ID)