Setup certificate for codesigning in github actions #9
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI/CD Pipeline | |
| on: | |
| push: | |
| branches: | |
| - develop | |
| - main | |
| - github-actions | |
| workflow_dispatch: | |
| jobs: | |
| checkout_and_build: | |
| runs-on: ${{ matrix.os }} | |
| strategy: | |
| matrix: | |
| include: | |
| - name: mac | |
| os: macos-14 | |
| - name: mac-intel | |
| os: macos-14 | |
| # - build: win32 | |
| # os: windows-latest | |
| # - build: win64 | |
| # os: windows-latest | |
| # - build: linux | |
| # os: ubuntu-latest | |
| # container: | |
| # image: cimg/node:${{ matrix.node_version }} | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-node@v4 | |
| with: | |
| node-version: '21.6.2' | |
| - name: Setup codesign certificate | |
| env: | |
| MACOS_CERTIFICATE: ${{ secrets.MACOS_CERTIFICATE }} | |
| MACOS_CERTIFICATE_PWD: ${{ secrets.MACOS_CERTIFICATE_PWD }} | |
| run: | | |
| echo $MACOS_CERTIFICATE | base64 -i - --decode > certificate.p12 | |
| security create-keychain -p "$KEYCHAIN_PWD" build.keychain | |
| security default-keychain -s build.keychain | |
| security unlock-keychain -p "$KEYCHAIN_PWD" build.keychain | |
| security import certificate.p12 -k build.keychain -P "$MACOS_CERTIFICATE_PWD" -T /usr/bin/codesign | |
| security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "$KEYCHAIN_PWD" build.keychain | |
| security find-identity -v -p codesigning | |
| - uses: actions/cache@v4 | |
| with: | |
| path: | | |
| ./node_modules | |
| ./* | |
| key: ${{ runner.os }}-build-${{ github.sha }} | |
| restore-keys: | | |
| ${{ runner.os }}-build- | |
| - name: Install Dependencies | |
| run: | | |
| yarn --ignore-engines | |
| - name: Build | |
| run: | | |
| if [ "${{ matrix.name }}" = "mac" ]; then | |
| sudo yarn make:mac | |
| elif [ "${{ matrix.name }}" = "mac-intel" ]; then | |
| sudo yarn make:mac-intel | |
| elif [ "${{ matrix.name }}" = "win32" ]; then | |
| sudo dpkg --add-architecture i386 | |
| sudo apt-get -y update | |
| sudo apt-get -y install wine wine32 mono-devel | |
| sudo yarn make:win32 | |
| elif [ "${{ matrix.name }}" = "win64" ]; then | |
| sudo dpkg --add-architecture i386 | |
| sudo apt-get -y update | |
| sudo apt-get -y install wine wine32 wine64 mono-devel | |
| sudo yarn make:win | |
| elif [ "${{ matrix.name }}" = "linux" ]; then | |
| sudo apt-get -y update | |
| sudo apt-get -y install fakeroot rpm squashfs-tools | |
| sudo yarn make:linux | |
| fi | |
| - name: Test | |
| if: matrix.name == 'mac' | |
| run: | | |
| yarn test | |
| - uses: actions/upload-artifact@v4 | |
| with: | |
| name: build-artifacts-${{ matrix.name }} | |
| path: | | |
| ./out/make/** | |