single action!

Author: sisby-folk

.github/workflows/build.yml

@@ -1,6 +1,9 @@
 name: Build
 
 on:
+  release:
+    types:
+      - published
   push:
     branches:
       - '**'
@@ -9,10 +12,12 @@ on:
   pull_request:
 
 permissions:
-  contents: read
+  id-token: write
+  attestations: write
+  contents: write
 
 jobs:
-  build:
+  release:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
@@ -29,13 +34,32 @@ jobs:
         with:
           validate-wrappers: true
 
+      - name: Enable gradlew execution
+        run: chmod +x ./gradlew
+
       - name: Gradle Build
         run: ./gradlew build
 
+      - name: Attest Build Provenance
+        uses: actions/attest-build-provenance@v2
+        with:
+          subject-path: 'build/libs/*.jar, !build/libs/*-sources.jar'
+
       - name: Upload Artifacts
         uses: actions/upload-artifact@v4
         with:
           name: Artifacts
           path: |
             build/libs/*.jar
             !build/libs/*-sources.jar
+
+      - name: Maven Publish
+        if: github.event_name == 'release' && github.event.action == 'published'
+        run: ./gradlew publish
+
+      - name: Github Publish
+        if: github.event_name == 'release' && github.event.action == 'published'
+        uses: AButler/[email protected]
+        with:
+          files: 'build/libs/*.jar;!build/libs/*-sources.jar'
+          repo-token: ${{ secrets.GITHUB_TOKEN }}