Download a private GitHub release using Ansible

download-gh-release.yml

---
- name: "Download a private GitHub release"
  vars:
    owner: "mikroskeem"
    repo: "snakeoil"
    tag: "v0.0.1"
    asset_name: "snakeoil.x86_64-linux"

    get_url_args:
      dest: "/tmp/the-thing"

    github_pat: "{{ lookup('env', 'GH_TOKEN') }}"
  block:
    - name: "Obtain GitHub release details"
      ansible.builtin.uri:
        url: "https://api.github.com/repos/{{ owner }}/{{ repo }}/releases/tags/{{ tag }}"
        return_content: true
        use_netrc: "{{ github_pat | default(false) is falsy }}"
        headers:
          "accept": "application/vnd.github.v3+json"
          "authorization": "{{ 'token ' + github_pat if github_pat | default('') else None }}"
          "x-github-api-version": "2022-11-28"
      register: "_gh_release"

    - name: "Download release from GitHub"
      vars:
        gh_release_asset_url: "{{ _gh_release.json.assets | selectattr('name', 'equalto', asset_name) | map(attribute='url') | first }}"
      ansible.builtin.get_url:
        url: "{{ gh_release_asset_url }}"
        dest: "{{ get_url_args.dest | mandatory }}"
        owner: "{{ get_url_args.owner | default(None) }}"
        group: "{{ get_url_args.group | default(None) }}"
        mode: "{{ get_url_args.mode | default(None) }}"

        use_netrc: "{{ github_pat | default(false) is falsy }}"
        headers:
          "accept": "application/octet-stream"
          "authorization": "{{ 'token ' + github_pat if github_pat | default('') else None }}"
          "x-github-api-version": "2022-11-28"