update workflows

Author: smokedlinq

.github/actions/build/action.yml

@@ -0,0 +1,18 @@
+name: 'Build'
+description: 'Sets up the environment and builds the solution'
+runs:
+  using: composite
+  steps:
+  - uses: actions/setup-dotnet@v1
+    with:
+      dotnet-version: 6.0.x
+
+  - uses: nuget/setup-nuget@v1
+    with:
+      nuget-version: 6.x
+
+  - run: dotnet restore
+    shell: pwsh
+
+  - run: dotnet build --configuration Release --no-restore
+    shell: pwsh

.github/workflows/ci.yml

@@ -1,30 +1,52 @@
+name: Continuous Integration
+
 on:
   push:
-    branches: [ main ]
+    branches:
+    - main
   pull_request:
-    types: [opened, synchronize, reopened]
-    branches: [ main ]
-  schedule:
-  - cron: 0 12 * * 1
+    branches:
+    - main
+
+permissions:
+  contents: read
+  security-events: write
+
+concurrency:
+  group: ${{ github.ref }}
+  cancel-in-progress: true
+
+defaults:
+  run:
+    shell: pwsh
 
 env:
   DOTNET_NOLOGO: true
   DOTNET_SKIP_FIRST_TIME_EXPERIENCE: true
 
 jobs:
   build:
-    name: Build
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v1
-      with:
-        fetch-depth: 0
+    - uses: actions/checkout@v2
+
+    - uses: ./.github/actions/build
+  
+    - run: dotnet test --configuration Release --logger 'console;verbosity=detailed' /p:CollectCoverage=true /p:CoverletOutputFormat=opencover
 
-    - name: Setup .NET Core 6.0.x
-      uses: actions/setup-dotnet@v1
+    - uses: snyk/actions/dotnet@master
+      continue-on-error: true
+      env:
+        SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
       with:
-        dotnet-version: 6.0.x
+        args: >-
+          --all-projects
+          --detection-depth=8
+          --severity-threshold=high
+          --sarif-file-output=snyk.sarif
+        command: test
 
-    - name: Build
-      run: dotnet build --configuration Release
+    - uses: github/codeql-action/upload-sarif@v1
+      with:
+        sarif_file: snyk.sarif

.github/workflows/publish.yml

@@ -1,41 +1,50 @@
+name: Publish
+
 on:
   push:
-    tags: [ 'v*' ]
+    tags: 
+    - 'v*'
+
+permissions:
+  contents: write
+  packages: write
+
+concurrency:
+  group: ${{ github.ref }}
+  cancel-in-progress: false
 
 env:
   DOTNET_NOLOGO: true
   DOTNET_SKIP_FIRST_TIME_EXPERIENCE: true
 
 jobs:
-  build:
-    name: Build
+  publish:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v1
-      with:
-        fetch-depth: 0
+    - uses: actions/checkout@v2
 
-    - name: Setup .NET Core 6.0.x
-      uses: actions/setup-dotnet@v1
-      with:
-        dotnet-version: 6.0.x
+    - uses: ./.github/actions/build
 
-    - name: Build and publish
+    - uses: smokedlinq/powershell-devops@v0
+
+    - run: ./.github/workflows/scripts/Set-VersionVariables.ps1
       shell: pwsh
-      run: |
-        dotnet build --configuration Release
-        dotnet pack --configuration Release -p:Version=$($env:GITHUB_REF -replace '^refs/tags/v','') --output ./publish
-        cd ./publish
-        dotnet nuget push "*.nupkg" -k ${{ secrets.NUGET_KEY }} -s https://api.nuget.org/v3/index.json --skip-duplicate
-        dotnet nuget push "*.nupkg" -s https://nuget.pkg.github.com/${{ github.repository_owner }} --skip-duplicate --no-symbols true --api-key ${{ secrets.GITHUB_TOKEN }}
-
-    - name: Create release
-      uses: actions/create-release@master
+      
+    - run: dotnet pack --configuration Release -p:Version=$PACKAGE_VERSION --output ./publish
+
+    - run: dotnet nuget push "*.nupkg" -k ${{ secrets.NUGET_KEY }} -s https://api.nuget.org/v3/index.json --skip-duplicate
+      working-directory: ./publish
+
+    - run: dotnet nuget push "*.nupkg" -s https://nuget.pkg.github.com/${{ github.repository_owner }}/index.json --skip-duplicate --no-symbols true --api-key ${{ secrets.GITHUB_TOKEN }}
+      working-directory: ./publish
+
+    - uses: actions/create-release@master
+      continue-on-error: true
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
         tag_name: ${{ github.ref }}
         release_name: Release ${{ github.ref }}
         draft: false
-        prerelease: false
+        prerelease: ${{ env.IS_PRERELEASE }}

.github/workflows/scripts/Set-VersionVariables.ps1

@@ -0,0 +1,18 @@
+# Requires -Version 7
+# Requires -Moduels powershell-devops
+
+[CmdletBinding()]
+param
+(
+    [ValidateNotNullOrEmpty()]
+    [string] $GITHUB_REF = $(Get-EnvironmentVariable GITHUB_REF -Require)
+)
+
+$Version = $($GITHUB_REF -replace '^refs/tags/v','')
+$IsPrerelease = $Version -like '*-*' ? 'true' : 'false'
+
+Write-Host "PACKAGE_VERSION: '$Version'"
+Write-Host "IS_PRERELEASE: $IsPrerelease"
+
+Set-EnvironmentVariable PACKAGE_VERSION $Version
+Set-EnvironmentVariable IS_PRERELEASE $IsPrerelease