Build, Test, Publish Github and PyPI Releases #35

	name: Build, Test, Publish Github and PyPI Releases

	on:
	workflow_dispatch:

	permissions:
	contents: write

	jobs:
	publish_github_release_and_pypi:
	runs-on: ubuntu-latest

	steps:
	- uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1
	with:
	egress-policy: audit

	- name: Check out the repository
	uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
	with:
	fetch-depth: 0

	- name: Set up Python
	uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f
	with:
	python-version: '3.11'

	- name: Install pip and pipenv
	run: \|
	python -m pip install --root-user-action=ignore --upgrade pip
	pip install --root-user-action=ignore pipenv
	make venv

	- name: Build Release tar.gz
	run: \|
	pipenv run python setup.py sdist

	- name: Install Build and Run PAT Tests
	run: \|
	pipenv run pip install --root-user-action=ignore dist/panther_analysis_tool-*.tar.gz
	pipenv run make integration

	- name: Create Github Release
	run: \|
	export NEW_VERSION=$(cat VERSION)
	git config user.name "dac-bot"
	git config user.email "[email protected]"
	gh release create v$NEW_VERSION dist/* -t v$NEW_VERSION --draft
	env:
	GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

	- name: Publish to PyPI
	run: \|
	pipenv run twine upload dist/*
	env:
	TWINE_USERNAME: ${{ secrets.TWINE_USERNAME }}
	TWINE_PASSWORD: ${{ secrets.TWINE_PASSWORD }}

Provide feedback