From 8adb4423ace3c740f340f9b4c4d92881e1345d0c Mon Sep 17 00:00:00 2001
From: Max Goedjen <max.goedjen@gmail.com>
Date: Tue, 19 Aug 2025 00:24:22 -0700
Subject: [PATCH] Release management using gh cli (#615)

---
 .github/templates/release.md  | 16 +++++++++++++
 .github/workflows/release.yml | 44 ++++-------------------------------
 2 files changed, 21 insertions(+), 39 deletions(-)
 create mode 100644 .github/templates/release.md

diff --git a/.github/templates/release.md b/.github/templates/release.md
new file mode 100644
index 0000000..071da11
--- /dev/null
+++ b/.github/templates/release.md
@@ -0,0 +1,16 @@
+Update description
+
+## Features
+
+
+## Fixes
+
+
+## Minimum macOS Version
+
+
+## Build
+https://github.com/maxgoedjen/secretive/actions/runs/RUN_ID
+
+## Attestation
+https://github.com/maxgoedjen/secretive/actions/runs/RUN_ID
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 45ea73d..df9b852 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -65,52 +65,18 @@ jobs:
         APPLE_API_KEY_ID: ${{ secrets.APPLE_API_KEY_ID }}
         APPLE_API_ISSUER: ${{ secrets.APPLE_API_ISSUER }}
       run: xcrun notarytool submit --key ~/.private_keys/AuthKey_$APPLE_API_KEY_ID.p8 --key-id $APPLE_API_KEY_ID --issuer $APPLE_API_ISSUER Secretive.zip
-    - name: Document SHAs
-      run: |
-            echo "sha-512:"
-            shasum -a 512 Secretive.zip
-            shasum -a 512 Xcode_Archive.zip
-            echo "sha-256:"
-            shasum -a 256 Secretive.zip
-            shasum -a 256 Xcode_Archive.zip
     - name: Attest 
       uses: actions/attest-build-provenance@v2
       with:
         subject-path: 'Secretive.zip, Xcode_Archive.zip'
     - name: Create Release
-      id: create_release
-      uses: actions/create-release@v1
+      run: |
+            gh release create $TAG_NAME -d -F templates/release.md
+            gh release upload Secretive.zip
+            gh release upload Xcode_Archive.zip
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      with:
-        tag_name: ${{ github.ref }}
-        release_name: ${{ github.ref }}
-        body: |
-          Update description
-
-          ## Features
-
-
-          ## Fixes
-
-
-          ## Minimum macOS Version
-
-
-          ## Build
-          https://github.com/maxgoedjen/secretive/actions/runs/${{ github.run_id }}
-        draft: true
-        prerelease: false
-    - name: Upload App to Release
-      id: upload-release-asset-app
-      uses: actions/upload-release-asset@v1.0.1
-      env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      with:
-        upload_url: ${{ steps.create_release.outputs.upload_url }}
-        asset_path: ./Secretive.zip
-        asset_name: Secretive.zip
-        asset_content_type: application/zip
+        TAG_NAME: ${{ github.ref }}
     - name: Upload App to Artifacts
       uses: actions/upload-artifact@v4
       with: