Thaw/.github/workflows/build-dmg.yml at 8751e995a5c049495d6d5601b92984fa14d08d76 · stonerl/Thaw · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
name: Build DMG

on:
  workflow_dispatch:

jobs:
  build-dmg:
    runs-on: macos-26
    env:
      APP_NAME: "Thaw.app"
      DMG_NAME: "Thaw-dev.dmg"
    steps:
      - uses: actions/checkout@v6

      # Issues with other Xcode versions, so we need to specify the version explicitly
      - run: sudo xcode-select -s /Applications/Xcode_26.5.app/Contents/Developer

      - name: Configure signing
        uses: ./.github/actions/configure-signing
        with:
          apple-application-cert: ${{ secrets.APPLE_APPLICATION_CERT }}
          apple-application-cert-password: ${{ secrets.APPLE_APPLICATION_CERT_PASSWORD }}
          apple-id: ${{ secrets.APPLE_ID }}
          apple-id-password: ${{ secrets.APPLE_ID_PASSWORD }}
          apple-team-id: ${{ secrets.APPLE_TEAM_ID }}

      - name: Build
        uses: ./.github/actions/build
        with:
          apple-team-id: ${{ secrets.APPLE_TEAM_ID }}

      - name: Export Archive
        uses: ./.github/actions/export-and-package
        with:
          apple-team-id: ${{ secrets.APPLE_TEAM_ID }}
          app-name: ${{ env.APP_NAME }}
          dmg-name: ${{ env.DMG_NAME }}

      - name: Notarize
        uses: ./.github/actions/notarize-and-validate
        with:
          dmg-name: ${{ env.DMG_NAME }}
          app-name: ${{ env.APP_NAME }}

      - name: Upload DMG
        uses: actions/upload-artifact@v7
        with:
          name: Thaw-dmg
          path: build/${{ env.DMG_NAME }}
          retention-days: 3

      - name: Cleanup keychain
        if: always()
        run: security delete-keychain "$RUNNER_TEMP/buildagent.keychain" || true