its never easy

Author: mbien

.github/workflows/main.yml

@@ -2646,30 +2646,29 @@ jobs:
     #  * nothing else failed (allows manual restarts)
     #  * the workflow got cancelled
     if: ${{ always() && needs.base-build.result == 'success' && (!contains(needs.*.result, 'failure') || cancelled()) }}
-    permissions:
-      actions: write
     runs-on: ubuntu-latest
     timeout-minutes: 60
     steps:
 
-      - name: Delete Workspace Artifact
-        run: |
-          ARTIFACT_ID=$(gh api /repos/${GITHUB_REPOSITORY}/actions/runs/${GITHUB_RUN_ID}/artifacts --jq ".artifacts[] | select(.name == \"${NAME}\") | .id")
-          echo ${ARTIFACT_ID}
-          if [ -n "$ARTIFACT_ID" ]; then
-            gh api /repos/${GITHUB_REPOSITORY}/actions/artifacts/${ARTIFACT_ID} -X DELETE
-          fi
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NAME: build.tar.zst
+      - name: Delete Workflow Artifacts
+        uses: actions/github-script@v8
+        with:
+          script: |
+            const artifacts = await github.rest.actions.listWorkflowRunArtifacts({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              run_id: context.runId
+            });
+            console.log(artifacts);
+            const job = github.context.job;
+            for (const artifact of artifacts.data.artifacts) {
+              if (artifact.name === "build.tar.zst" || (artifact.name.startsWith("dev-build") && job.status === 'cancelled')) {
+                console.log("removing " + artifact.name);
+                await github.rest.actions.deleteArtifact({
+                  owner: context.repo.owner,
+                  repo: context.repo.repo,
+                  artifact_id: artifact.id
+                });
+              }
+            }
 
-      - name: Delete Dev Build Artifact
-        if: ${{ contains(github.event.pull_request.labels.*.name, 'ci:dev-build') && cancelled() }}
-        run: |
-          ARTIFACT_ID=$(gh api /repos/${GITHUB_REPOSITORY}/actions/runs/${GITHUB_RUN_ID}/artifacts --jq ".artifacts[] | select(.name == \"${NAME}\") | .id")
-          if [ -n "$ARTIFACT_ID" ]; then
-            gh api /repos/${GITHUB_REPOSITORY}/actions/artifacts/${ARTIFACT_ID} -X DELETE
-          fi
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NAME: dev-build_${{github.event.pull_request.number || github.run_id}}.zip