From 0a38ac209b8c2a7d45ff23002b119d290e1c8d96 Mon Sep 17 00:00:00 2001
From: Martin Pulec <martin.pulec@cesnet.cz>
Date: Thu, 12 Jun 2025 09:46:02 +0200
Subject: [PATCH] download-gh-asset.sh improved

fix the situation when most recent release doesn't include the asset
matching the patern (but some other does)

notes:
- the assets are included directly in /releases, no need for subsequent fetch
- use -e to fail jq if the result is null
- $pattern doesn't need to be anchored
---
 .github/scripts/download-gh-asset.sh | 19 +++++++++++++------
 1 file changed, 13 insertions(+), 6 deletions(-)

diff --git a/.github/scripts/download-gh-asset.sh b/.github/scripts/download-gh-asset.sh
index c640c41ab..0b9b25df2 100755
--- a/.github/scripts/download-gh-asset.sh
+++ b/.github/scripts/download-gh-asset.sh
@@ -15,11 +15,18 @@ readonly file="${3?output filename must be given!}"
 
 gh_release_json=$(fetch_json "https://api.github.com/repos/$repo/releases" \
         "${GITHUB_TOKEN-}" array)
-gh_release=$(jq -r '.[0].assets_url' "$gh_release_json")
+gh_path=$(jq  -e -r '
+[ .[]                                    # for each top‐level object
+  | .assets[]                            # walk into its assets array
+  | select(.name | test("'"$pattern"'")) # keep only those whose name matches
+  | .browser_download_url                # print just the URL
+][0]                                     # include only 1st match
+' "$gh_release_json")
 rm -- "$gh_release_json"
-gh_path_json=$(fetch_json "$gh_release" "${GITHUB_TOKEN-}" array)
-gh_path=$(jq -r '[.[] | select(.name | test(".*'"$pattern"'.*"))] |
-        .[0].browser_download_url' "$gh_path_json")
-rm -- "$gh_path_json"
-curl -sSL "$gh_path" -o "$file"
+if [ -n "${GITHUB_TOKEN-}" ]; then
+        set -- -H "Authorization: token $GITHUB_TOKEN"
+else
+        set --
+fi
+curl -sSL "$@" "$gh_path" -o "$file"