github: upload artifacts on push

Upload the built core archive to an S3 bucket when updating branches in
the main repository.

Author: pillo79

Diff for: .github/workflows/package_core.yml

@@ -60,7 +60,7 @@ jobs:
           path: ${{ env.CORE_ARTIFACT }}.tar.bz2
 
   test-core:
-    name: Test arduino:zephyr:${{ matrix.board }}
+    name: Test ${{ matrix.board }} board
     runs-on: ubuntu-latest
     needs: package-core
     strategy:
@@ -83,7 +83,7 @@ jobs:
           mkdir Blink/
           wget -nv https://raw.githubusercontent.com/arduino/arduino-examples/refs/heads/main/examples/01.Basics/Blink/Blink.ino -P Blink/
 
-      - name: Compile Blink for ${{ env.FQBN }}
+      - name: Compile Blink for ${{ matrix.board }}
         uses: pillo79/compile-sketches@main
         with:
           fqbn: ${{ env.FQBN }}
@@ -151,3 +151,31 @@ jobs:
               fi
             fi
           done
+
+  publish-artifacts:
+    name: Publish artifacts
+    runs-on: ubuntu-latest
+    if: ${{ github.event_name == 'push' && github.repository == 'arduino/ArduinoCore-zephyr' }}
+    needs:
+      - package-core
+      - test-core
+    environment: production
+    permissions:
+      id-token: write
+      contents: read
+    env:
+      CORE_ARTIFACT: ${{ needs.package-core.outputs.CORE_ARTIFACT }}
+      ARTIFACT_FILE: ${{ needs.package-core.outputs.CORE_ARTIFACT }}.tar.bz2
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: ${{ env.CORE_ARTIFACT }}
+
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          role-to-assume: ${{ secrets.IAM_ROLE }}
+          aws-region: ${{ secrets.AWS_REGION }}
+
+      - name: Upload artifact
+        run: aws s3 cp ${{ env.ARTIFACT_FILE }} s3://${{ secrets.S3_BUCKET }}/