feat: add Homebrew tap publishing to release workflow

Publish formula to hyperi-io/homebrew-macbash tap on release using
a GitHub App token for secure cross-repo access. Also fix org name
in formula template from hypersec-io to hyperi-io.

Author: Derek

.github/workflows/release.yml

@@ -162,3 +162,35 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: semantic-release
+
+      - name: Generate GitHub App token for tap repo
+        if: steps.version.outputs.release_needed == 'true'
+        id: app-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.HOMEBREW_APP_ID }}
+          private-key: ${{ secrets.HOMEBREW_APP_PRIVATE_KEY }}
+          owner: hyperi-io
+          repositories: homebrew-macbash
+
+      - name: Publish Homebrew formula to tap
+        if: steps.version.outputs.release_needed == 'true'
+        env:
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}
+        run: |
+          VERSION=${{ steps.version.outputs.version }}
+
+          # Clone the tap repo using the app token
+          git clone "https://x-access-token:${GH_TOKEN}@github.com/hyperi-io/homebrew-macbash.git" /tmp/homebrew-macbash
+
+          # Copy the generated formula
+          mkdir -p /tmp/homebrew-macbash/Formula
+          cp dist/macbash.rb /tmp/homebrew-macbash/Formula/macbash.rb
+
+          # Commit and push
+          cd /tmp/homebrew-macbash
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git add Formula/macbash.rb
+          git commit -m "Update macbash to ${VERSION}"
+          git push

packaging/homebrew/macbash.rb

@@ -8,26 +8,26 @@
 
 class Macbash < Formula
   desc "Bash script compatibility checker for macOS"
-  homepage "https://github.com/hypersec-io/macbash"
+  homepage "https://github.com/hyperi-io/macbash"
   version "${VERSION}"
   license "Apache-2.0"
 
   on_macos do
     if Hardware::CPU.arm?
-      url "https://github.com/hypersec-io/macbash/releases/download/v${VERSION}/macbash-darwin-arm64.tar.gz"
+      url "https://github.com/hyperi-io/macbash/releases/download/v${VERSION}/macbash-darwin-arm64.tar.gz"
       sha256 "${SHA256_DARWIN_ARM64}"
     else
-      url "https://github.com/hypersec-io/macbash/releases/download/v${VERSION}/macbash-darwin-amd64.tar.gz"
+      url "https://github.com/hyperi-io/macbash/releases/download/v${VERSION}/macbash-darwin-amd64.tar.gz"
       sha256 "${SHA256_DARWIN_AMD64}"
     end
   end
 
   on_linux do
     if Hardware::CPU.arm?
-      url "https://github.com/hypersec-io/macbash/releases/download/v${VERSION}/macbash-linux-arm64.tar.gz"
+      url "https://github.com/hyperi-io/macbash/releases/download/v${VERSION}/macbash-linux-arm64.tar.gz"
       sha256 "${SHA256_LINUX_ARM64}"
     else
-      url "https://github.com/hypersec-io/macbash/releases/download/v${VERSION}/macbash-linux-amd64.tar.gz"
+      url "https://github.com/hyperi-io/macbash/releases/download/v${VERSION}/macbash-linux-amd64.tar.gz"
       sha256 "${SHA256_LINUX_AMD64}"
     end
   end