feat: publish miniooni binaries into releases (#607)

This is the miniooni related part of https://github.com/ooni/probe/issues/1879.

This diff will require backport to the release/3.11 branch.

.github/workflows/miniooni.yml

@@ -1,19 +1,26 @@
 # miniooni checks whether we can build the research client miniooni
-# and publishes the linux binaries as artefacts. There is no point in
-# publishing windows or darwin binaries b/c they are not signed.
+# and publishes the linux binaries as artifacts and, if we're building
+# a tag, into the current release. We don't publish artifacts for
+# Windows and macOS because they're not signed. For releases, we have
+# a script that we'll later use to sign unsigned binaries.
 name: miniooni
 on:
   push:
     branches:
       - "master"
       - "release/**"
+    tags:
+      - "v*"
+
 jobs:
-  test:
+  build_and_publish:
     runs-on: ubuntu-20.04
     steps:
+
       - uses: actions/setup-go@v1
         with:
           go-version: "1.17.3"
+
       - uses: actions/checkout@v2
         with:
           fetch-depth: 0
@@ -26,25 +33,36 @@ jobs:
           PSIPHON_CONFIG_JSON_AGE_BASE64: ${{ secrets.PSIPHON_CONFIG_JSON_AGE_BASE64 }}
 
       - run: ./mk ./CLI/miniooni
-
-      - run: ./E2E/miniooni.bash ./CLI/linux/amd64/miniooni
+      - run: ./E2E/miniooni.bash ./CLI/miniooni-linux-amd64
 
       - uses: actions/upload-artifact@v1
         with:
           name: miniooni-linux-386
-          path: ./CLI/linux/386/miniooni
-
+          path: ./CLI/miniooni-linux-386
       - uses: actions/upload-artifact@v1
         with:
           name: miniooni-linux-amd64
-          path: ./CLI/linux/amd64/miniooni
-
+          path: ./CLI/miniooni-linux-amd64
       - uses: actions/upload-artifact@v1
         with:
-          name: miniooni-linux-arm
-          path: ./CLI/linux/arm/miniooni
-
+          name: miniooni-linux-armv7
+          path: ./CLI/miniooni-linux-armv7
       - uses: actions/upload-artifact@v1
         with:
           name: miniooni-linux-arm64
-          path: ./CLI/linux/arm64/miniooni
+          path: ./CLI/miniooni-linux-arm64
+
+      - run: |
+          tag=$(echo $GITHUB_REF | sed 's|refs/tags/||g')
+          gh release create -p $tag --target $GITHUB_SHA || true
+          gh release upload $tag --clobber ./CLI/miniooni-darwin-amd64 \
+                                           ./CLI/miniooni-darwin-arm64 \
+                                           ./CLI/miniooni-linux-386 \
+                                           ./CLI/miniooni-linux-amd64 \
+                                           ./CLI/miniooni-linux-armv7 \
+                                           ./CLI/miniooni-linux-arm64 \
+                                           ./CLI/miniooni-windows-386.exe \
+                                           ./CLI/miniooni-windows-amd64.exe
+        if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}