* customize release workflow

* add release trigger with  workflow dispatch
* fix docker variants to just openjdk-17
* add workflow to create binaries with java-17
* add lacchain dco
* add codeql
* fix codeql
* refactor workflows
* enable to run tests before publishing binaries

Signed-off-by: eum602 <[email protected]>

.github/workflows/checks.yml

@@ -1,13 +1,13 @@
 name: checks
 on:
   push:
-    branches: [ main ]
+    branches: [lacchain_release]
   pull_request:
   workflow_dispatch:
 
 jobs:
   spotless:
-    runs-on: [besu-research-ubuntu-16]
+    runs-on: ubuntu-latest
     if: ${{ github.actor != 'dependabot[bot]' }}
     steps:
       - name: Checkout Repo
@@ -21,7 +21,7 @@ jobs:
       - name: spotless
         run: ./gradlew --no-daemon --parallel clean spotlessCheck
   javadoc_17:
-    runs-on: [besu-research-ubuntu-8]
+    runs-on: ubuntu-latest
     if: ${{ github.actor != 'dependabot[bot]' }}
     steps:
       - name: Checkout Repo

.github/workflows/codeql.yml

@@ -13,18 +13,19 @@ name: "CodeQL"
 
 on:
   push:
-    branches: [ main ]
+    branches: [ lacchain_release ]
   pull_request:
-    branches: [ main ]
+    branches: [ lacchain_release ]
     paths-ignore:
       - '**/*.json'
       - '**/*.md'
       - '**/*.properties'
       - '**/*.txt'
+  workflow_dispatch:
 jobs:
   analyze:
     name: Analyze
-    runs-on: [besu-research-ubuntu-16]
+    runs-on: ubuntu-latest
     permissions:
       actions: read
       contents: read

.github/workflows/dco.yml

@@ -1,11 +1,10 @@
 name: dco
 on:
   pull_request:
-  workflow_dispatch:
 
 jobs:
   dco:
-    runs-on: [besu-research-ubuntu-8]
+    runs-on: ubuntu-latest
     if: ${{ github.actor != 'dependabot[bot]' }}
     steps:
       - run: echo "This DCO job runs on pull_request event and workflow_dispatch"

.github/workflows/gradle-wrapper-validation.yml

@@ -5,7 +5,7 @@ on: [push, pull_request]
 jobs:
   validation:
     name: "Gradle Wrapper Validation"
-    runs-on: [besu-research-ubuntu-8]
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3
       - uses: gradle/wrapper-validation-action@v1

.github/workflows/lacchain-binary-release.yml

@@ -0,0 +1,28 @@
+name: release lacchain-besu binary
+on:
+  release:
+    types: [created]
+jobs:
+  binaryPromoteX64:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      packages: write
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-java@v3
+        with:
+          distribution: 'temurin'
+          java-version: '17'
+
+      - name: Setup Gradle
+        uses: gradle/gradle-build-action@v2
+      - name: Build with Gradle
+        run: ./gradlew build --no-daemon
+
+      - name: Upload the artifacts
+        uses: skx/github-action-publish-binaries@master
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          args: 'build/distributions/*'

.github/workflows/lacchain-docker-release.yml

@@ -0,0 +1,32 @@
+name: release lacchain-besu docker
+on:
+  release:
+    types: released
+  workflow_dispatch:
+env:
+  REGISTRY: ghcr.io
+jobs:
+  dockerPromoteX64:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-java@v3
+        with:
+          distribution: 'temurin' # See 'Supported distributions' for available options
+          java-version: '17'
+      - name: Log in to the Container registry
+        uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - name: Setup Gradle
+        uses: gradle/gradle-build-action@v2
+      - name: Build docker image
+        env:
+          architecture: "amd64"
+          dockerVariants: "openjdk-17"
+        run: ./gradlew --no-daemon "-PdockerVariants=${{ env.dockerVariants }}" "-Prelease.releaseVersion=${{ github.ref_name }}" "-PdockerArtifactName=lacchain-besu" "-PdockerOrgName=${{ env.REGISTRY }}/lacchain" dockerUpload -x test -x :ethereum:evmtool:dockerUpload