feat: notarize commit id (#1728) #664
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: stable-macos | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| force_version: | |
| type: boolean | |
| description: Force update version | |
| test_asset_builder: | |
| type: boolean | |
| description: Test the assets builder | |
| push: | |
| branches: [ master ] | |
| paths-ignore: | |
| - '**/*.md' | |
| pull_request: | |
| branches: [ master ] | |
| paths-ignore: | |
| - '**/*.md' | |
| env: | |
| APP_NAME: VSCodium | |
| ASSETS_REPOSITORY: ${{ github.repository }} | |
| OS_NAME: osx | |
| VERSIONS_REPOSITORY: ${{ github.repository_owner }}/versions | |
| VSCODE_QUALITY: stable | |
| jobs: | |
| build: | |
| runs-on: ${{ matrix.runner }} | |
| env: | |
| VSCODE_ARCH: ${{ matrix.vscode_arch }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - runner: macos-12 | |
| vscode_arch: x64 | |
| - runner: [self-hosted, macOS, ARM64] | |
| vscode_arch: arm64 | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Setup Node.js environment | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: '18.17' | |
| - name: Setup Python 3 | |
| uses: actions/setup-python@v4 | |
| with: | |
| python-version: '3.11' | |
| if: env.VSCODE_ARCH == 'x64' | |
| - name: Clone VSCode repo | |
| run: . get_repo.sh | |
| - name: Check PR or cron | |
| env: | |
| TEST_ASSET_BUILDER: ${{ github.event.inputs.test_asset_builder }} | |
| run: . check_cron_or_pr.sh | |
| - name: Check existing VSCodium tags/releases | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| run: . check_tags.sh | |
| if: env.SHOULD_DEPLOY == 'yes' | |
| - name: Build | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| run: ./build.sh | |
| if: env.SHOULD_BUILD == 'yes' | |
| - name: Prepare assets | |
| env: | |
| CERTIFICATE_OSX_P12: ${{ secrets.CERTIFICATE_OSX_P12 }} | |
| CERTIFICATE_OSX_PASSWORD: ${{ secrets.CERTIFICATE_OSX_PASSWORD }} | |
| CERTIFICATE_OSX_ID: ${{ secrets.CERTIFICATE_OSX_ID }} | |
| run: ./prepare_assets.sh | |
| if: env.SHOULD_BUILD == 'yes' && (env.SHOULD_DEPLOY == 'yes' || github.event.inputs.test_asset_builder == 'true') | |
| - name: Release | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| run: ./release.sh | |
| if: env.SHOULD_BUILD == 'yes' && env.SHOULD_DEPLOY == 'yes' | |
| - name: Update versions repo | |
| env: | |
| FORCE_UPDATE: ${{ github.event.inputs.force_version }} | |
| GITHUB_TOKEN: ${{ secrets.STRONGER_GITHUB_TOKEN }} | |
| GITHUB_USERNAME: ${{ github.repository_owner }} | |
| run: ./update_version.sh | |
| if: env.SHOULD_DEPLOY == 'yes' | |
| - name: Clean up keychain | |
| if: always() | |
| run: | | |
| KEYCHAIN=$RUNNER_TEMP/build.keychain | |
| if [ -f "$KEYCHAIN" ]; | |
| then | |
| security delete-keychain $KEYCHAIN | |
| fi |