Artifacts 与自定义 Action 发布：从上传下载到市场分发

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - run: |
          mkdir -p dist
          echo "hello" > dist/app.txt
          tar -czf dist.tar.gz dist

      - name: Upload single file
        uses: actions/upload-artifact@v4
        with:
          name: app-bundle
          path: dist.tar.gz
          if-no-files-found: error        # error | warn | ignore
          compression-level: 6            # 0-9，默认 6
          retention-days: 30              # 1-90，默认 90

jobs:
  test:
    needs: build
    runs-on: ubuntu-latest
    steps:
      # 下载单个 artifact 到指定目录
      - uses: actions/download-artifact@v4
        with:
          name: app-bundle
          path: ./artifacts

      # v4 支持按 glob 模式批量下载
      - uses: actions/download-artifact@v4
        with:
          pattern: 'coverage-*'
          path: ./coverage
          merge-multiple: true            # 合并到同一目录

# gh CLI 列出 run 的 artifacts
gh api "/repos/OWNER/REPO/actions/artifacts?per_page=100" \
  --jq '.artifacts[] | "\(.name) \(.created_at) \(.expires_at)"'

# 删除指定 artifact
gh api -X DELETE "/repos/OWNER/REPO/actions/artifacts/{artifact_id}"

# 删除过期 artifact 的定时任务示例
gh workflow run cleanup-artifacts.yml

# .github/workflows/build.yml
name: Build
on:
  push:
    branches: [main]

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - run: echo "release" > binary.tar.gz
      - uses: actions/upload-artifact@v4
        with:
          name: release-artifact
          path: binary.tar.gz
          retention-days: 30

# .github/workflows/deploy.yml
name: Deploy
on:
  workflow_run:
    workflows: ["Build"]
    types: [completed]

jobs:
  deploy:
    runs-on: ubuntu-latest
    if: ${{ github.event.workflow_run.conclusion == 'success' }}
    permissions:
      actions: read                      # 需要读取 Artifact
      contents: read
    steps:
      - uses: actions/download-artifact@v4
        with:
          name: release-artifact
          github-token: ${{ secrets.GITHUB_TOKEN }}
          run-id: ${{ github.event.workflow_run.id }}
          path: ./release
      - run: ./deploy.sh ./release/binary.tar.gz

# JavaScript Action
name: "My JS Action"
description: "在 Node 运行时中执行的 Action"
inputs:
  who-to-greet:
    description: "要问候的人"
    required: true
    default: "World"
outputs:
  time:
    description: "问候时间"
runs:
  using: node20
  main: dist/index.js

# Composite Action
name: "My Composite Action"
description: "组合多个 steps 的 Action"
inputs:
  target:
    required: true
outputs:
  result:
    description: "执行结果"
runs:
  using: composite
  steps:
    - run: echo "准备阶段 ${{ inputs.target }}"
      shell: bash
    - uses: actions/checkout@v4
    - run: echo "完成"
      shell: bash

# Docker Action
name: "My Docker Action"
description: "在容器中执行的 Action"
inputs:
  command:
    required: true
runs:
  using: docker
  image: Dockerfile
  args:
    - ${{ inputs.command }}

my-action/
├── action.yml
├── package.json
├── src/
│   └── main.js
└── dist/
    └── index.js        # ncc 打包产物

{
  "name": "my-action",
  "main": "dist/index.js",
  "scripts": {
    "build": "ncc build src/main.js -o dist --source-map"
  },
  "dependencies": {
    "@actions/core": "^1.10.0",
    "@actions/github": "^6.0.0"
  }
}

const core = require('@actions/core');
const github = require('@actions/github');

try {
  // 读取输入
  const whoToGreet = core.getInput('who-to-greet');
  console.log(`Hello ${whoToGreet}!`);

  // 获取触发上下文（repo、sha、event）
  const ctx = github.context;
  console.log(`repo: ${ctx.repo.owner}/${ctx.repo.repo}`);

  // 设置输出
  core.setOutput('time', new Date().toTimeString());

  // 失败：设置 job 失败并终止
  // core.setFailed('遇到错误');
} catch (error) {
  core.setFailed(error.message);
}

const core = require('@actions/core');
const github = require('@actions/github');

const token = core.getInput('token', { required: true });
const octokit = github.getOctokit(token);

async function main() {
  const { owner, repo } = github.context.repo;
  const pr = github.context.payload.pull_request;
  if (!pr) return;

  // 在 PR 上创建评论
  await octokit.rest.issues.createComment({
    owner, repo,
    issue_number: pr.number,
    body: '构建通过 ✅',
  });
}
main().catch((e) => core.setFailed(e.message));

runs:
  using: composite
  steps:
    - name: 运行脚本
      run: |
        echo "${{ github.action_path }}"   # 只能在 composite 中使用
        ./scripts/setup.sh
      shell: bash                          # 每个 run 步骤必须显式声明 shell

    - name: 引用外层工作流目录
      run: |
        # composite 的工作目录是 Action 仓库，不是调用方仓库
        echo "使用 inputs 传入调用方路径: ${{ inputs.source-path }}"
      shell: bash

# Dockerfile
FROM python:3.12-slim
COPY entrypoint.py /entrypoint.py
ENTRYPOINT ["python", "/entrypoint.py"]

# action.yml
name: "Python Linter"
description: "在固定 Python 环境中运行 lint"
inputs:
  lint-path:
    description: "要检查的路径"
    required: true
runs:
  using: docker
  image: Dockerfile
  args:
    - ${{ inputs.lint-path }}

# 完整版本（不可变）
git tag v1.2.3

# 大版本移动 tag（可变，随补丁推进）
git tag -f v1
git tag -f v1.2

# 推送
git push origin v1.2.3 v1 v1.2 --force

## 用法

```yaml
- uses: your-org/my-action@v1
  with:
    who-to-greet: "Octocat"