From fa8eec59aad1f6bc1ba18cda7826a76d9b25b282 Mon Sep 17 00:00:00 2001
From: nerdCopter <56646290+nerdCopter@users.noreply.github.com>
Date: Mon, 26 Feb 2024 11:16:08 -0600
Subject: [PATCH] pin artifacts

---
 .github/workflows/pin-artifacts.yml | 46 +++++++++++++++++++++++++++++
 1 file changed, 46 insertions(+)
 create mode 100644 .github/workflows/pin-artifacts.yml

diff --git a/.github/workflows/pin-artifacts.yml b/.github/workflows/pin-artifacts.yml
new file mode 100644
index 0000000000..208c359a43
--- /dev/null
+++ b/.github/workflows/pin-artifacts.yml
@@ -0,0 +1,46 @@
+name: Pin artifacts
+on:
+  workflow_run:
+    workflows: ["Build EmuFlight"]
+    types: ["completed"]
+
+jobs:
+  # Make artifacts links more visible for the upstream project
+  pin-artifacts:
+    permissions:
+      statuses: write
+    name: Add artifacts links to commit statuses
+    if: ${{ github.event.workflow_run.conclusion == 'success' }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Add artifacts links to commit status
+        run: |
+          set -x
+          workflow_id=${{ github.event.workflow_run.workflow_id }}
+          run_id=${{ github.event.workflow_run.id }}  # instead of ${{ github.run_id }}
+          run_number=${{ github.event.workflow_run.run_number }}
+          head_branch=${{ github.event.workflow_run.head_branch }}
+          head_sha=${{ github.event.workflow_run.head_sha }}  # instead of ${{ github.event.pull_request.head.sha }} (or ${{ github.sha }})
+          check_suite_id=${{ github.event.workflow_run.check_suite_id }}
+          set +x
+
+          curl \
+          -H "Accept: application/vnd.github+json" \
+          "https://api.github.com/repos/${{ github.repository }}/actions/runs/${run_id}/artifacts" \
+          | jq '[.artifacts | .[] | {"id": .id, "name": .name, "created_at": .created_at, "expires_at": .expires_at, "archive_download_url": .archive_download_url}] | sort_by(.name)' \
+          > artifacts.json
+
+          cat artifacts.json
+
+          < artifacts.json jq -r ".[] | \
+            .name + \"§\" + \
+            ( .id | tostring | \"https://github.com/${{ github.repository }}/suites/${check_suite_id}/artifacts/\" + . ) + \"§\" + \
+            ( \"Link to \" + .name + \".zip [\" + ( .created_at | sub(\"T.*\"; \"→\") ) + ( .expires_at | sub(\"T.*\"; \"] (you must be logged)\" ) ) )" \
+          | while IFS="§" read name url descr; do
+              curl \
+              -X POST \
+              -H "Accept: application/vnd.github+json" \
+              -H "Authorization: Bearer ${{ github.token }}" \
+              "https://api.github.com/repos/${{ github.repository }}/statuses/${head_sha}" \
+              -d "$( printf '{"state":"%s","target_url":"%s","description":"%s","context":"%s"}' "${{ github.event.workflow_run.conclusion }}" "$url" "$descr" "$name (artifact)" )"
+          done