update ci workflow, update docs

.github/workflows/build-iwa.yml

@@ -15,10 +15,10 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 20
 
@@ -45,7 +45,7 @@ jobs:
         run: make
 
       - name: Upload bundle artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: ligolo-iwa-bundle
           path: |

.github/workflows/release-iwa.yml

@@ -0,0 +1,55 @@
+name: Release IWA Bundle
+
+on:
+  push:
+    tags:
+      - "*"
+
+jobs:
+  release-iwa:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: 20
+
+      - name: Install dependencies
+        run: npm install
+
+      - name: Materialize signing key
+        env:
+          IWA_SIGNING_KEY: ${{ secrets.IWA_SIGNING_KEY }}
+        run: |
+          if [ -z "$IWA_SIGNING_KEY" ]; then
+            echo "::error::Missing required secret IWA_SIGNING_KEY"
+            exit 1
+          fi
+
+          mkdir -p keys
+          printf '%s' "$IWA_SIGNING_KEY" > keys/ed25519.key
+          chmod 600 keys/ed25519.key
+
+      - name: Build signed IWA bundle
+        env:
+          CI: "true"
+          WEB_BUNDLE_SIGNING_PASSPHRASE: ${{ secrets.WEB_BUNDLE_SIGNING_PASSPHRASE }}
+        run: make
+
+      - name: Create GitHub release
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          if gh release view "$GITHUB_REF_NAME" >/dev/null 2>&1; then
+            gh release upload "$GITHUB_REF_NAME" out/ligolo-iwa.swbn --clobber
+          else
+            gh release create "$GITHUB_REF_NAME" out/ligolo-iwa.swbn \
+              --title "$GITHUB_REF_NAME" \
+              --generate-notes
+          fi

README.md

@@ -1,9 +1,17 @@
 # Ligolo-IWA
 
+A Ligolo-ng JavaScript agent working inside Chrome/Edge by leveraging Isolated Web Applications.
+
+![Ligolo-IWA](docs/demo.png)
+
+See the Ligolo-IWA doc for quick setup: [Ligolo-IWA (Setup/Quickstart)](https://iwa.ligolo.ng/)
+
+And don't forget to read the Ligolo-ng documentation: [📑 Ligolo-ng Documentation (Setup/Quickstart)](https://docs.ligolo.ng/)
+
 [![GPLv3](https://img.shields.io/badge/License-GPLv3-brightgreen.svg)](https://www.gnu.org/licenses/gpl-3.0)
 
-[📑 Ligolo-IWA (Setup/Quickstart)](https://iwa.ligolo.ng/)
-[📑 Ligolo-ng Documentation (Setup/Quickstart)](https://docs.ligolo.ng/)
+
+## Local setup
 
 Build the signed Isolated Web App bundle locally with: