Verify release artifacts before tagging

scripts/publish-gitea-release.sh

@@ -17,6 +17,7 @@ Defaults:
 Environment:
   GITEA_URL, GITEA_REPO, GITEA_TOKEN: same as upload-gitea-release.sh
   DOSH_PUBLISH_ALLOW_DIRTY=1          allow uncommitted changes
+  DOSH_RELEASE_ALLOW_PARTIAL=1         allow publishing an incomplete artifact set
 EOF
 }
 
@@ -36,6 +37,7 @@ token="${GITEA_TOKEN:-}"
 build="${DOSH_PUBLISH_BUILD:-1}"
 push_tag="${DOSH_PUBLISH_PUSH:-1}"
 prune="${DOSH_PUBLISH_PRUNE:-1}"
+allow_partial="${DOSH_RELEASE_ALLOW_PARTIAL:-0}"
 
 if [ -z "$token" ] && [ -f "$HOME/.config/dosh/gitea-token" ]; then
   token="$(tr -d '\r\n' <"$HOME/.config/dosh/gitea-token")"
@@ -57,6 +59,14 @@ if [ "${DOSH_PUBLISH_ALLOW_DIRTY:-0}" != "1" ] && [ -n "$(git status --porcelain
   exit 1
 fi
 
+if [ "$build" = "1" ]; then
+  sh scripts/package-release.sh
+fi
+
+if [ "$allow_partial" != "1" ]; then
+  sh scripts/verify-release-artifacts.sh
+fi
+
 head="$(git rev-parse HEAD)"
 if git rev-parse -q --verify "refs/tags/$tag" >/dev/null; then
   tagged="$(git rev-list -n 1 "$tag")"
@@ -72,10 +82,6 @@ if [ "$push_tag" = "1" ]; then
   git push origin "$tag"
 fi
 
-if [ "$build" = "1" ]; then
-  sh scripts/package-release.sh
-fi
-
 scripts/upload-gitea-release.sh "$tag"
 
 api="$base/api/v1/repos/$repo"