dbgate/.github/workflows/build-app-check.yaml

# --------------------------------------------------------------------------------------------
# This file is generated. Do not edit manually
# --------------------------------------------------------------------------------------------
name: Electron app check build
'on':
  push:
    tags:
      - check-[0-9]+-[0-9]+-[0-9]+.[0-9]+
permissions:
  id-token: write
  contents: write
jobs:
  build:
    runs-on: ${{ matrix.os }}
    environment: dbgate-app
    strategy:
      fail-fast: false
      matrix:
        os:
          - macos-14
          - windows-2022
          - ubuntu-22.04
    steps:
      - name: Install python 3.11 (MacOS)
        if: matrix.os == 'macos-14'
        run: |
          brew install python@3.11
          echo "PYTHON=/opt/homebrew/bin/python3.11" >> $GITHUB_ENV
      - name: Context
        env:
          GITHUB_CONTEXT: ${{ toJson(github) }}
        run: echo "$GITHUB_CONTEXT"
      - uses: actions/checkout@v2
        with:
          fetch-depth: 1
      - name: Use Node.js 22.x
        uses: actions/setup-node@v1
        with:
          node-version: 22.x
      - name: adjustPackageJson
        run: |

          node adjustPackageJson --community
      - name: yarn set timeout
        run: |

          yarn config set network-timeout 100000
      - name: yarn install
        run: |

          yarn install
      - name: setCurrentVersion
        run: |

          yarn setCurrentVersion
      - name: fillPackagedPlugins
        run: |

          yarn fillPackagedPlugins
      - name: Install Snapcraft
        if: matrix.os == 'ubuntu-22.04'
        uses: samuelmeuli/action-snapcraft@v1
      - name: Publish Windows
        if: matrix.os == 'windows-2022'
        run: |

          yarn run build:app
      - name: Publish MacOS
        if: matrix.os == 'macos-14'
        run: |

          yarn run build:app
        env:
          CSC_LINK: ${{ secrets.APPLECERT_CERTIFICATE }}
          CSC_KEY_PASSWORD: ${{ secrets.APPLECERT_PASSWORD }}
          APPLE_ID: ${{ secrets.APPLE_ID }}
          APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
          APPLE_ID_PASSWORD: ${{ secrets.APPLE_ID_PASSWORD }}
          APPLE_APP_SPECIFIC_PASSWORD: ${{secrets.APPLE_APP_SPECIFIC_PASSWORD}}
      - name: Publish Linux
        if: matrix.os == 'ubuntu-22.04'
        run: |

          yarn run build:app
        env:
          SNAPCRAFT_STORE_CREDENTIALS: ${{secrets.SNAPCRAFT_LOGIN}}
      - name: Azure login (OIDC)
        uses: azure/login@v2
        if: matrix.os == 'windows-2022'
        with:
          client-id: ${{ secrets.AZURE_TC_CLIENT_ID }}
          tenant-id: ${{ secrets.AZURE_TC_TENANT_ID }}
          allow-no-subscriptions: true
      - name: Sign Windows artifacts with Azure Trusted Signing
        uses: azure/trusted-signing-action@v0
        if: matrix.os == 'windows-2022'
        with:
          endpoint: https://wus3.codesigning.azure.net/
          trusted-signing-account-name: DbGate
          certificate-profile-name: DbGate-Release
          files-folder: app/dist
          files-folder-filter: exe
          timestamp-rfc3161: http://timestamp.acs.microsoft.com
          timestamp-digest: SHA256
      - name: Fix YML hashes
        if: matrix.os == 'windows-2022'
        run: |

          yarn run fixYmlHashes
      - name: Copy artifacts
        run: |
          mkdir artifacts          

          cp app/dist/*.deb artifacts/dbgate-check.deb || true
          cp app/dist/*x86*.AppImage artifacts/dbgate-check.AppImage || true
          cp app/dist/*arm64*.AppImage artifacts/dbgate-check-arm64.AppImage || true
          cp app/dist/*armv7l*.AppImage artifacts/dbgate-check-armv7l.AppImage || true
          cp app/dist/*win*.exe artifacts/dbgate-check.exe || true
          cp app/dist/*win_x64.zip artifacts/dbgate-windows-check.zip || true
          cp app/dist/*win_arm64.zip artifacts/dbgate-windows-check-arm64.zip || true
          cp app/dist/*win_arm64.exe artifacts/dbgate-windows-check-arm64.exe || true
          cp app/dist/*-mac_universal.dmg artifacts/dbgate-check.dmg || true
          cp app/dist/*-mac_x64.dmg artifacts/dbgate-check-x64.dmg || true
          cp app/dist/*-mac_arm64.dmg artifacts/dbgate-check-arm64.dmg || true
          mv app/dist/*.snap artifacts/dbgate-check.snap || true

          mv app/dist/*.exe artifacts/ || true
          mv app/dist/*.zip artifacts/ || true
          mv app/dist/*.tar.gz artifacts/ || true
          mv app/dist/*.AppImage artifacts/ || true
          mv app/dist/*.deb artifacts/ || true
          mv app/dist/*.snap artifacts/ || true
          mv app/dist/*.dmg artifacts/ || true
          mv app/dist/*.blockmap artifacts/ || true

          mv app/dist/*.yml artifacts/ || true
          rm artifacts/builder-debug.yml
      - name: Print content of notarization-error.log
        if: failure() && matrix.os == 'macos-14'
        run: |

          find . -type f -name "notarization-error.log" -exec echo "=== Start of {} ===" \; -exec cat {} \; -exec echo "=== End of {} ===" \;