From 4c03f00b4b244404cbc75bbfc4fee9c7e5678fd3 Mon Sep 17 00:00:00 2001
From: Ana Maria Martinez Gomez <ana.martinez@mandiant.com>
Date: Fri, 23 Feb 2024 08:24:16 +0100
Subject: [PATCH] [CI] Use badge in gist for rules number in README

This simplifies the workflow code and remove the need for the noisy
commits in capa-rules. We still need the commits in capa to sync the
submodule.
---
 .github/workflows/sync.yml | 26 ++++++++++----------------
 README.md                  |  2 +-
 2 files changed, 11 insertions(+), 17 deletions(-)

diff --git a/.github/workflows/sync.yml b/.github/workflows/sync.yml
index 0fd1980c1..c6401888b 100644
--- a/.github/workflows/sync.yml
+++ b/.github/workflows/sync.yml
@@ -8,21 +8,19 @@ jobs:
     steps:
     - name: Checkout capa-rules
       uses: actions/checkout@v3
-    - name: Update rules number badge in README
+    - name: Count rules
       run: |
         num_rules=$(find . -type f -name '*.yml' -not -path './.github/*' | wc -l)
-        sed -i "s/rules-[0-9]*-blue\.svg/rules-$num_rules-blue.svg/" README.md
-    - name: Commit changes
-      run: |
-        git config user.email 'capa-dev@mandiant.com'
-        git config user.name 'Capa Bot'
-        # Do not fail the action if rules number doesn't change
-        git add -A
-        git diff-index --quiet HEAD || git commit -am 'Update rules number badge'
-    - name: Push changes to capa-rules
-      uses: ad-m/github-push-action@master
+        echo "num_rules=$num_rules" >> $GITHUB_ENV
+    - name: Update dynamic badge gist
+      uses: schneegans/dynamic-badges-action@e9a478b16159b4d31420099ba146cdc50f134483 # v1.7.0
       with:
-        github_token: ${{ secrets.GITHUB_TOKEN }}
+        auth: ${{ secrets.GITHUB_TOKEN }}
+        gistID: 6d7960e911f48b3b74916df8988cf0f3
+        filename: rules_badge.svg
+        label: rules
+        message: ${{ env.num_rules }}
+        color: blue
 
   sync_submodule_capa:
     runs-on: ubuntu-20.04
@@ -43,10 +41,6 @@ jobs:
         ref: master
         path: rules
         fetch-depth: 100 # needed so that `git diff` finds `github.event.before`
-    - name: Update rules number badge in README
-      run: |
-        num_rules=$(find rules -type f -name '*.yml' -not -path 'rules/.github/*' | wc -l)
-        sed -i "s/rules-[0-9]*-blue\.svg/rules-$num_rules-blue.svg/" README.md
     - name: Update number of new rules in CHANGELOG
       run: |
         new_rules=$(git -C rules diff -M --summary ${{ github.event.before }} | grep create | grep .yml | wc -l)
diff --git a/README.md b/README.md
index 322be18af..73697eada 100644
--- a/README.md
+++ b/README.md
@@ -1,7 +1,7 @@
 # capa rules
 
 [![Rule linter status](https://github.com/mandiant/capa-rules/workflows/CI/badge.svg)](https://github.com/mandiant/capa-rules/actions?query=workflow%3A%22CI%22)
-[![Number of rules](https://img.shields.io/badge/rules-871-blue.svg)](rules)
+[![Number of rules](https://gist.githubusercontent.com/capa-bot/6d7960e911f48b3b74916df8988cf0f3/raw/rules_badge.svg)](rules)
 [![License](https://img.shields.io/badge/license-Apache--2.0-green.svg)](LICENSE.txt)
 
 This is the standard collection of rules for [capa](https://github.com/mandiant/capa) - the tool to automatically identify capabilities of programs.