master.yml

name: CI

# Controls when the action will run. 
on:
  # Triggers the workflow on push or pull request events but only for the master branch
  push:
    branches: [ master ]
    tags:
      - 'Vault/*'

  # Allows you to run this workflow manually from the Actions tab
  workflow_dispatch:

env:
  AZURE_STORAGE_CONTAINER: dist

# A workflow run is made up of one or more jobs that can run sequentially or in parallel
jobs:
  debian-x64:
    name: debian-x64
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - run: ./Build/CI/build.sh
        env:
          RID: debian-x64
          PGP_KEY: ${{ secrets.PGP_KEY }}
          AZURE_STORAGE_CONNECTION_STRING: ${{ secrets.AZURE_STORAGE_CONNECTION_STRING }}
  linux-x64:
    name: linux-x64
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - run: ./Build/CI/build.sh
        env:
          RID: linux-x64
          AZURE_STORAGE_CONNECTION_STRING: ${{ secrets.AZURE_STORAGE_CONNECTION_STRING }}
  osx-x64:
    name: osx-x64
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - run: ./Build/CI/build.sh
        env:
          RID: osx-x64
          AZURE_STORAGE_CONNECTION_STRING: ${{ secrets.AZURE_STORAGE_CONNECTION_STRING }}
  win-x64:
    name: win-x64
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - run: ./Build/CI/build.sh
        env:
          RID: win-x64
          WINDOWS_CERT: ${{ secrets.WINDOWS_CERT }}
          WINDOWS_CERT_PASSWORD: ${{ secrets.WINDOWS_CERT_PASSWORD }}
          AZURE_STORAGE_CONNECTION_STRING: ${{ secrets.AZURE_STORAGE_CONNECTION_STRING }}
  applesign:
    name: applesign
    runs-on: macOS-latest
    needs: [osx-x64]
    if: startsWith( github.ref, 'refs/tags/')
    steps:
      - uses: actions/checkout@v4
      - run: ./Build/CI/applesign.sh
        env:
          APPLE_ID: ${{ secrets.APPLE_ID }}
          APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
          APPLE_ID_PASSWORD: ${{ secrets.APPLE_ID_PASSWORD }}
          APPLE_DEV_ID_CERT: ${{ secrets.APPLE_DEV_ID_CERT }}
          APPLE_DEV_ID_CERT_PASSWORD: ${{ secrets.APPLE_DEV_ID_CERT_PASSWORD }}
          AZURE_STORAGE_CONNECTION_STRING: ${{ secrets.AZURE_STORAGE_CONNECTION_STRING }}
  pgpsign:
    name: pgpsign
    runs-on: ubuntu-latest
    needs: [win-x64, osx-x64, linux-x64, debian-x64, applesign]
    if: ${{ always() }}
    steps:
      - uses: actions/checkout@v4
      - run: ./Build/CI/pgpsign.sh
        env:
          PGP_KEY: ${{ secrets.PGP_KEY }}
          AZURE_STORAGE_CONNECTION_STRING: ${{ secrets.AZURE_STORAGE_CONNECTION_STRING }}
  makerelease:
    name: makerelease
    runs-on: ubuntu-latest
    needs: [pgpsign, applesign]
    if: startsWith( github.ref, 'refs/tags/')
    steps:
      - uses: actions/checkout@v4
      - run: ./Build/CI/makerelease.sh
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          AZURE_STORAGE_CONNECTION_STRING: ${{ secrets.AZURE_STORAGE_CONNECTION_STRING }}