-
Notifications
You must be signed in to change notification settings - Fork 2
107 lines (103 loc) · 3.48 KB
/
deploy_github_signed_windows.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
name: Deploy Signed Windows Installer to GitHub Releases
# Note: The following SignPath Artifact Configuration must be set as default:
#
# <?xml version="1.0" encoding="utf-8"?>
# <artifact-configuration xmlns="http://signpath.io/artifact-configuration/v1">
# <zip-file>
# <pe-file path="*.exe">
# <authenticode-sign/>
# </pe-file>
# </zip-file>
# </artifact-configuration>
on:
push:
tags:
- '*'
env:
PYINSTALLER_COMPILE_BOOTLOADER: 1
jobs:
build:
name: Create Release
runs-on: ${{ matrix.os }}
strategy:
matrix:
python-version: ["3.10"]
os: [windows-latest]
steps:
- name: Set env
shell: bash
run: echo "RELEASE_VERSION=${GITHUB_REF#refs/*/}" >> $GITHUB_ENV
- uses: actions/checkout@main
- name: Set up Python ${{ matrix.python-version }}
uses: actions/setup-python@main
with:
python-version: ${{ matrix.python-version }}
- name: Install Python dependencies
run: |
python -m pip install --upgrade pip
pip install setuptools wheel twine
pip install .[GUI]
- name: Build windows executable
working-directory: ./build-recipes
run: |
pip install -r win_build_requirements.txt
pyinstaller -y --log-level=WARN win_DCOR-Aid.spec
# Run the binary (the most simple test)
dist\\DCOR-Aid\\DCOR-Aid.exe --version
- name: Upload windows executable
id: uploadBinaryArtifact
uses: actions/upload-artifact@v4.4.3
with:
name: dcoraid-executable
path: ./build-recipes/dist/DCOR-Aid/DCOR-Aid.exe
- name: Remove unsigned windows binary
shell: bash
run: |
rm ./build-recipes/dist/DCOR-Aid/DCOR-Aid.exe
- name: Sign Windows executable
uses: signpath/github-action-submit-signing-request@v1
with:
api-token: '${{ secrets.SIGNPATH_API_TOKEN }}'
organization-id: '29ae08d5-8472-4f2c-9808-11552bf815f2'
project-slug: 'DCOR-Aid'
signing-policy-slug: 'release-signing'
github-artifact-id: '${{steps.uploadBinaryArtifact.outputs.artifact-id}}'
wait-for-completion: true
output-artifact-directory: 'build-recipes/dist/DCOR-Aid'
parameters: |
Version: "${{ env.RELEASE_VERSION }}"
- name: Create Windows installer
working-directory: ./build-recipes
run: |
python win_make_iss.py
ISCC.exe /Q win_dcoraid.iss
- name: Upload windows installer
id: uploadInstallerArtifact
uses: actions/upload-artifact@v4.4.3
with:
name: dcoraid-installer
path: ./build-recipes/Output/*.exe
- name: Remove unsigned windows installer
shell: bash
run: |
rm -rf ./build-recipes/Output/*.exe
- name: Sign Windows installer
uses: signpath/github-action-submit-signing-request@v1
with:
api-token: '${{ secrets.SIGNPATH_API_TOKEN }}'
organization-id: '29ae08d5-8472-4f2c-9808-11552bf815f2'
project-slug: 'DCOR-Aid'
signing-policy-slug: 'release-signing'
github-artifact-id: '${{steps.uploadInstallerArtifact.outputs.artifact-id}}'
wait-for-completion: true
output-artifact-directory: 'build-recipes/Output'
parameters: |
Version: "${{ env.RELEASE_VERSION }}"
- name: Release Assets
uses: softprops/action-gh-release@v1
with:
name: DCOR-Aid ${{ env.RELEASE_VERSION }}
draft: true
prerelease: false
files: |
./build-recipes/Output/*.exe