Skip to content

Build MacAdmins OSQuery Extension (Manual) #5

Build MacAdmins OSQuery Extension (Manual)

Build MacAdmins OSQuery Extension (Manual) #5

name: Build MacAdmins OSQuery Extension (Manual)
env:
VERSION: 2024.04.29 # hardcoded for now until we figure out how we want to tackle this
on: [workflow_dispatch]
jobs:
build:
runs-on: macos-12
steps:
- name: Set up Go
uses: actions/setup-go@v4
with:
go-version: ${{ env.GO_VERSION }}
- name: Checkout osquery repo repo
uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f # v3.4.0
with:
fetch-depth: 0
- name: Install Apple Xcode certificates
uses: apple-actions/import-codesign-certs@8f3fb608891dd2244cdab3d69cd68c0d37a7fe93 # v2.0.0
with:
keychain-password: ${{ github.run_id }}
p12-file-base64: ${{ secrets.APP_CERTIFICATES_P12_MAOS }}
p12-password: ${{ secrets.APP_CERTIFICATES_P12_PASSWORD_MAOS }}
- name: Install Apple Installer certificates
uses: apple-actions/import-codesign-certs@8f3fb608891dd2244cdab3d69cd68c0d37a7fe93 # v2.0.0
with:
create-keychain: false # do not create a new keychain for this value
keychain-password: ${{ github.run_id }}
p12-file-base64: ${{ secrets.PKG_CERTIFICATES_P12_MAOS }}
p12-password: ${{ secrets.PKG_CERTIFICATES_P12_PASSWORD_MAOS }}
- name: Run makefile
run: make zip
- name: Generate changelog
id: changelog
uses: metcalfc/changelog-generator@afdcb9470aebdb2252c0c95a1c130723c9e21f3a # v4.1
with:
myToken: ${{ secrets.GITHUB_TOKEN }}
reverse: 'true'
- name: Create Release
id: create_release
uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v0.1.15
with:
name: v${{env.VERSION}}
tag_name: v${{env.VERSION}}
draft: false
prerelease: false
token: ${{ secrets.GITHUB_TOKEN }}
body: |
# What's Changed
${{ steps.changelog.outputs.changelog }}
files: ${{github.workspace}}/*.zip