INTG-3078 upd label (#109) #180
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # yamllint disable rule:line-length | |
| --- | |
| name: package | |
| # yamllint disable-line rule:truthy | |
| on: | |
| push: | |
| tags: | |
| - "v*.*.*" | |
| jobs: | |
| package: | |
| strategy: | |
| matrix: | |
| go-version: [1.20.4] | |
| node-version: [16] | |
| os: [windows-latest, ubuntu-latest, macos-latest] | |
| runs-on: ${{ matrix.os }} | |
| steps: | |
| - name: Install Go | |
| uses: actions/setup-go@v2 | |
| with: | |
| go-version: ${{ matrix.go-version }} | |
| - name: Checkout code | |
| uses: actions/checkout@v2 | |
| - name: Use Node.js ${{ matrix.node-version }} | |
| uses: actions/setup-node@v3 | |
| with: | |
| node-version: ${{ matrix.node-version }} | |
| - name: Install wails | |
| run: go install github.com/wailsapp/wails/v2/cmd/wails@v2.6.0 | |
| - name: Build package windows | |
| if: matrix.os == 'windows-latest' | |
| run: | | |
| $GP = (go env GOPATH) | |
| $env:path = "$env:path;$GP\bin" | |
| echo "building on ${{ matrix.os }}" | |
| echo "${{ env.GITHUB_REF }}" | |
| echo "${{ env.GITHUB_HEAD_REF }}" | |
| choco install mingw | |
| wails build -platform windows/amd64 -clean -ldflags "-s -w -X github.com/SafetyCulture/safetyculture-exporter-ui/internal/version.version=${{ github.ref_name }}" -skipbindings | |
| - name: Sign Windows Binary | |
| if: matrix.os == 'windows-latest' | |
| run: | | |
| echo "Creating certificate file" | |
| New-Item -ItemType directory -Path certificate | |
| Set-Content -Path certificate\certificate.txt -Value "${{ secrets.WIN_SIGNING_CERT }}" | |
| certutil -decode certificate\certificate.txt certificate\certificate.pfx | |
| echo "Signing binary" | |
| & "C:/Program Files (x86)/Windows Kits/10/bin/10.0.17763.0/x86/signtool.exe" sign /fd sha256 /tr http://ts.ssl.com /f certificate\certificate.pfx /p "${{ secrets.WIN_SIGNING_CERT_PASSWORD }}" .\build\bin\safetyculture-exporter.exe | |
| Copy-Item -Path .\build\bin\safetyculture-exporter.exe -Destination .\exporter-windows-x86_64.exe | |
| - name: Build and code sign macos binaries | |
| if: matrix.os == 'macos-latest' | |
| env: | |
| MAC_SIGNING_CERT: ${{ secrets.MAC_SIGNING_CERT }} | |
| run: | | |
| echo "Importing certificates" | |
| echo $MAC_SIGNING_CERT | base64 --decode > certificate.p12 | |
| security create-keychain -p ${{ secrets.MAC_SIGNING_KEYCHAIN_PWD }} build.keychain | |
| security default-keychain -s build.keychain | |
| security unlock-keychain -p ${{ secrets.MAC_SIGNING_KEYCHAIN_PWD }} build.keychain | |
| security import certificate.p12 -k build.keychain -P ${{ secrets.MAC_SIGNING_CERT_PASSWORD }} -T /usr/bin/codesign | |
| security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k ${{ secrets.MAC_SIGNING_KEYCHAIN_PWD }} build.keychain | |
| export PATH=${PATH}:`go env GOPATH`/bin | |
| echo "Building darwin/arm64" | |
| wails build -platform darwin/arm64 -clean -ldflags "-s -w -X github.com/SafetyCulture/safetyculture-exporter-ui/internal/version.version=${{ github.ref_name }}" | |
| echo "Code signing darwin/arm64" | |
| codesign --force -s "${{ secrets.MAC_SIGNING_CERT_NAME }}" --options runtime ./build/bin/safetyculture-exporter.app -v | |
| echo "Zipping Package" | |
| ditto -c -k --keepParent ./build/bin/safetyculture-exporter.app ./safetyculture-exporter-darwin-arm64.zip | |
| echo "Cleaning up" | |
| rm -rf build/bin/SafetyCulture Exporter.app | |
| echo "Building darwin/amd64" | |
| wails build -platform darwin/amd64 -clean -ldflags "-s -w -X github.com/SafetyCulture/safetyculture-exporter-ui/internal/version.version=${{ github.ref_name }}" | |
| echo "Code signing darwin/amd64" | |
| codesign --force -s "${{ secrets.MAC_SIGNING_CERT_NAME }}" --options runtime ./build/bin/safetyculture-exporter.app -v | |
| echo "Zipping Package" | |
| ditto -c -k --keepParent ./build/bin/safetyculture-exporter.app ./safetyculture-exporter-darwin-amd64.zip | |
| echo "Cleaning up" | |
| rm -rf build/bin/SafetyCulture Exporter.app | |
| echo "${{ secrets.APPSTORE_API_KEY }}" > appstore_api_key.p8 | |
| xcrun notarytool submit "safetyculture-exporter-darwin-arm64.zip" --key "appstore_api_key.p8" --key-id "${{ secrets.APPSTORE_API_KEY_ID }}" --issuer "${{ secrets.APPSTORE_API_ISSUER_ID }}" --wait | |
| xcrun notarytool submit "safetyculture-exporter-darwin-amd64.zip" --key "appstore_api_key.p8" --key-id "${{ secrets.APPSTORE_API_KEY_ID }}" --issuer "${{ secrets.APPSTORE_API_ISSUER_ID }}" --wait | |
| - name: Upload artifacts macOS | |
| if: matrix.os == 'macos-latest' | |
| uses: actions/upload-artifact@v2 | |
| with: | |
| name: exporter-macos | |
| path: safetyculture-exporter-*.zip | |
| - name: Upload artifacts windows | |
| if: matrix.os == 'windows-latest' | |
| uses: actions/upload-artifact@v2 | |
| with: | |
| name: exporter-windows | |
| path: exporter-windows-x86_64.exe | |
| release: | |
| runs-on: ubuntu-latest | |
| needs: package | |
| steps: | |
| - name: Download package windows | |
| uses: actions/download-artifact@v2 | |
| with: | |
| name: exporter-windows | |
| - name: Download package macos | |
| uses: actions/download-artifact@v2 | |
| with: | |
| name: exporter-macos | |
| - name: Create Release | |
| id: create_release | |
| uses: ncipollo/release-action@v1 | |
| with: | |
| token: "${{ secrets.GITHUB_TOKEN }}" | |
| artifacts: "safetyculture-exporter-*.zip,exporter-windows-x86_64.exe" | |
| allowUpdates: true | |
| prerelease: true | |
| draft: true | |
| makeLatest: false |