Publish to Chocolatey.org when a GH publish completes

.github/workflows/chocolatey.yml

@@ -0,0 +1,69 @@
+name: Chocolatey Deploy
+
+# This GH action will push a okta-aws-cli build to chocolatey.org when a
+# okta-aws-cli GH release is completed.
+# 
+# inspired by https://github.com/rcmaehl/MSEdgeRedirect thank you rcmaehl 🙏🙏🙏
+
+on:
+  release:
+    types:
+      - published
+
+defaults:
+  run:
+    shell: bash
+
+jobs:
+  chocolatey:
+    runs-on: windows-latest
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v4
+      -
+        name: Unshallow
+        run: git fetch --prune --unshallow
+      -
+        name: Get latest release tag
+        uses: oprypin/find-latest-tag@v1
+        with:
+          repository: ${{ github.repository }}
+          releases-only: true
+        id: latesttag
+      -
+        name: Set Version
+        id: version
+        run: |
+          version=$(echo "${{ steps.latesttag.outputs.tag }}" | grep -oE "[[:digit:]]{1,}\.[[:digit:]]{1,}\.[[:digit:]]{1,}")
+          echo "nuget=$version" >> $GITHUB_OUTPUT
+          sed -i "s/{VERSION}/${version}/g" "nuspec/chocolatey/okta-aws-cli.nuspec"
+      -
+        name: Set Checksum
+        run: |
+          filename="okta-aws-cli_${{ steps.version.outputs.nuget }}_windows_386.zip"
+          url="https://github.com/${{ github.repository }}/releases/download/${{ steps.latesttag.outputs.tag }}/${filename}"
+          sed -i "s#{ZIPURL}#${url}#g" "nuspec/chocolatey/tools/chocolateyinstall.ps1"
+          curl -sSL "${url}" -o "nuspec/chocolatey/${filename}"
+          sha256=$(cat "nuspec/chocolatey/${filename}" | sha256sum -)
+          sed -i "s/{SHA256CHECKSUM}/${sha256:0:64}/g" "nuspec/chocolatey/tools/chocolateyinstall.ps1"
+      -
+        name: Choco Downgrade
+        uses: crazy-max/ghaction-chocolatey@v3
+        with:
+          args: install chocolatey --version=1.2.1 --allow-downgrade -y -r --no-progress
+      -
+        name: Pack Release
+        uses: crazy-max/ghaction-chocolatey@v3
+        with:
+          args: pack nuspec/chocolatey/okta-aws-cli.nuspec --outputdirectory nuspec/chocolatey
+      -
+        name: Choco Upgrade
+        uses: crazy-max/ghaction-chocolatey@v3
+        with:
+          args: upgrade chocolatey
+      -
+        name: Upload Release
+        uses: crazy-max/ghaction-chocolatey@v3
+        with:
+          args: push nuspec/chocolatey/okta-aws-cli.${{ steps.version.outputs.nuget }}.nupkg -s https://push.chocolatey.org/ -k ${{ secrets.CHOCO_API_KEY }}

nuspec/chocolatey/okta-aws-cli.nuspec

@@ -3,7 +3,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>okta-aws-cli</id>
-    <version>2.0.1</version>
+    <version>{VERSION}</version>
     <owners>Okta, Inc.</owners>
     <title>Okta AWS CLI (Install)</title>
     <authors>Okta</authors>

nuspec/chocolatey/tools/chocolateyinstall.ps1

@@ -1,13 +1,12 @@
 
 $ErrorActionPreference = 'Stop'
 $toolsDir   = "$(Split-Path -parent $MyInvocation.MyCommand.Definition)"
-$url        = 'https://github.com/okta/okta-aws-cli/releases/download/v2.0.1/okta-aws-cli_2.0.1_windows_386.zip'
 
 $packageArgs = @{
   packageName   = $env:ChocolateyPackageName
   unzipLocation = $toolsDir
-  url           = $url
-  checksum      = 'F05862D42BF14133EFA88C9F77C0AB942858CA0FFDE980D0615395E8E48FD4D6'
+  url           = '{ZIPURL}'
+  checksum      = '{SHA256CHECKSUM}'
   checksumType  = 'sha256'
 }