cleanup: update files

Signed-off-by: K.B.Dharun Krishna <[email protected]>

.github/dependabot.yml

@@ -3,7 +3,7 @@ updates:
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
-      interval: "monthly"
+      interval: "weekly"
   - package-ecosystem: "gomod"
     directory: "/"
     schedule:

.github/workflows/go.yml

@@ -31,7 +31,7 @@ jobs:
           apt-get install -y pkg-config build-essential
 
     - name: Build
-      run: go build -o vso
+      run: go build -o vso -ldflags="-X 'main.Version=${{ github.sha }}'"
 
     - name: Check for missing strings
       uses: vanilla-os/[email protected]
@@ -42,26 +42,26 @@ jobs:
     - name: Compress-manpage
       run: tar -czvf vso-man.tar.gz man/vso.1
 
+    - name: Calculate and Save Checksums
+      run: |
+        sha256sum vso.tar.gz >> checksums.txt
+        sha256sum vso-man.tar.gz >> checksums.txt
+
     - uses: actions/upload-artifact@v4
       with:
         name: vso
-        path: vso.tar.gz
+        path: |
+          checksums.txt
+          vso.tar.gz
+          vso-man.tar.gz
 
     - uses: softprops/action-gh-release@v2
-      if: github.repository == 'vanilla-os/vanilla-system-operator' && github.ref == 'refs/heads/main'
       with:
           token: "${{ secrets.GITHUB_TOKEN }}"
           tag_name: "continuous"
           prerelease: true
           name: "Continuous Build"
           files: |
+            checksums.txt
             vso.tar.gz
             vso-man.tar.gz
-
-    - name: Attest continuous release files
-      if: github.repository == 'vanilla-os/vanilla-system-operator' && github.ref == 'refs/heads/main'
-      uses: actions/attest-build-provenance@v1
-      with:
-        subject-path: |
-          vso.tar.gz
-          vso-man.tar.gz

.github/workflows/release.yml

@@ -1,43 +1,21 @@
-name: goreleaser
+name: Release
 
 on:
   push:
     tags:
       - '*'
 
 jobs:
-  goreleaser:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-      - name: Set up Go
-        uses: actions/setup-go@v5
-        with:
-          go-version: 1.22
-
-      - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@v6
-        with:
-          distribution: goreleaser
-          version: latest
-          args: release --clean
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-  upload-artifacts:
+  build-artifacts:
     runs-on: ubuntu-latest
     container:
       image: ghcr.io/vanilla-os/pico:main
     permissions:
-      contents: write # Allow uploading assets to release
-      attestations: write # To create and write attestations
-      id-token: write # Additional permissions for persistence of the attestations
+        contents: read
 
     steps:
       - uses: actions/checkout@v4
+
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
@@ -49,24 +27,56 @@ jobs:
             apt-get install -y pkg-config build-essential
 
       - name: Build
-        run: go build -o vso
-
+        run: go build -o vso -ldflags="-X 'main.Version=${{ github.ref_name }}'"
+
+      - name: Check for missing strings
+        uses: vanilla-os/[email protected]
+
       - name: Compress
         run: tar -czvf vso.tar.gz vso
 
       - name: Compress-manpage
         run: tar -czvf vso-man.tar.gz man/vso.1
 
-      - uses: softprops/action-gh-release@v2
+      - name: Calculate and Save Checksums
+        run: |
+          sha256sum vso.tar.gz >> checksums.txt
+          sha256sum vso-man.tar.gz >> checksums.txt
+
+      - uses: actions/upload-artifact@v4
         with:
-          token: "${{ secrets.GITHUB_TOKEN }}"
-          files: |
+          name: vso
+          path: |
+            checksums.txt
             vso.tar.gz
             vso-man.tar.gz
-      
-      - name: Attest release files
+
+  release:
+    runs-on: ubuntu-latest
+    needs: build-artifacts
+    permissions:
+      contents: write # to create and upload assets to releases
+      attestations: write # to upload assets attestation for build provenance
+      id-token: write # grant additional permission to attestation action to mint the OIDC token permission
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Download Artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: vso
+
+      - name: Create Release
+        env:
+            GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: gh release create "${{ github.ref_name }}" --generate-notes *.tar.gz checksums.txt
+
+      - name: Attest Release Files
+        id: attest
         uses: actions/attest-build-provenance@v1
         with:
-          subject-path: |
-            vso.tar.gz
-            vso-man.tar.gz
+          subject-path: '*.tar.gz, checksums.txt'

README.md

@@ -21,25 +21,27 @@ Usage:
   vso [command]
 
 Available Commands:
+  android     Manage the vso waydroid subsystem
   completion  Generate the autocompletion script for the specified shell
   config      Manage the system configuration.
   export      Export an application or binary from the subsystem
   help        Help about any command
   install     Install an application inside the subsystem
-  pico-init   Initialize the Pico subsystem, used for package management
+  pico-init   Initialize the VSO subsystem, used for package management
   remove      Remove an application from the subsystem
   run         Run an application from the subsystem
   search      Search for an application to install inside the subsystem
   shell       Enter the subsystem environment
-  sys         Execute system tasks, such as upgrading the system
+  sideload    Sideload DEB/APK packages inside the subsystem
+  sys         Execute system commands, such as upgrading the system
   tasks       Create and manage tasks
   unexport    Unexport an application or binary from the subsystem
   update      Update the subsystem's package repository
   upgrade     Upgrade the packages inside the subsystem
 
 Flags:
-  -h, --help      help for vso
-  -v, --version   version for vso
+  -h, --help      Show help for vso.
+  -v, --version   Show version for vso.
 
 Use "vso [command] --help" for more information about a command.
 ```