0ct0pu5/ente
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[desktop] Code sign on Windows

Browse source
This commit is contained in:
Manav Rathi 2024-05-27 11:15:58 +05:30
parent c7be2270ff
commit 7e6b750040
No known key found for this signature in database
1 changed files with 37 additions and 1 deletions

38
desktop/.github/workflows/desktop-release.yml vendored
View file

@ -54,8 +54,16 @@ jobs:
# https://github.com/electron-userland/electron-builder/issues/4181
run: sudo apt-get install libarchive-tools
- name: Build
- name: Export Windows code signing certificate
if: startsWith(matrix.os, 'windows')
run: echo "$CSC_LINK_PFX_B64" | base64 -d > windows-csc.pfx
shell: bash
env:
CSC_LINK_PFX_B64: ${{ secrets.WINDOWS_CSC_LINK_PFX_B64 }}
- name: Build Linux
uses: ente-io/action-electron-builder@v1.0.0
if: startsWith(matrix.os, 'ubuntu')
with:
package_root: desktop
build_script_name: build:ci
@ -68,6 +76,19 @@ jobs:
# create a (draft) release after building. Otherwise upload
# assets to the existing draft named after the version.
release: ${{ startsWith(github.ref, 'refs/tags/v') }}
env:
# Workaround recommended in
# https://github.com/electron-userland/electron-builder/issues/3179
USE_HARD_LINKS: false
- name: Build macOS
uses: ente-io/action-electron-builder@v1.0.0
if: startsWith(matrix.os, 'macos')
with:
package_root: desktop
build_script_name: build:ci
github_token: ${{ secrets.GITHUB_TOKEN }}
release: ${{ startsWith(github.ref, 'refs/tags/v') }}
mac_certs: ${{ secrets.MAC_CERTS }}
mac_certs_password: ${{ secrets.MAC_CERTS_PASSWORD }}
@ -78,3 +99,18 @@ jobs:
${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }}
APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
USE_HARD_LINKS: false
- name: Build Windows
uses: ente-io/action-electron-builder@v1.0.0
if: startsWith(matrix.os, 'windows')
with:
package_root: desktop
build_script_name: build:ci
github_token: ${{ secrets.GITHUB_TOKEN }}
release: ${{ startsWith(github.ref, 'refs/tags/v') }}
env:
# Windows signing credentials
# https://www.electron.build/code-signing
CSC_LINK: "windows-csc.pfx"
CSC_KEY_PASSWORD: ${{ secrets.WINDOWS_CSC_KEY_PASSWORD }}
USE_HARD_LINKS: false