-
Notifications
You must be signed in to change notification settings - Fork 9
112 lines (108 loc) · 3.77 KB
/
deploy_github_signed_windows.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
name: Deploy Signed Windows Installer to GitHub Releases
#on:
# workflow_run:
# workflows: [Deploy to GitHub Releases]
# types:
# - completed
on:
push:
env:
PYINSTALLER_COMPILE_BOOTLOADER: 1
jobs:
build:
name: Create Release
runs-on: ${{ matrix.os }}
strategy:
matrix:
python-version: ["3.10"]
os: [windows-latest]
steps:
- name: Set env
shell: bash
run: echo "RELEASE_VERSION=${GITHUB_REF#refs/*/}" >> $GITHUB_ENV
- uses: actions/checkout@main
- name: Set up Python ${{ matrix.python-version }}
uses: actions/setup-python@main
with:
python-version: ${{ matrix.python-version }}
- name: Install Python dependencies
run: |
python -m pip install --upgrade pip
pip install setuptools wheel twine
pip install .
- name: Build windows executable
working-directory: ./build-recipes
run: |
pip install -r win_build_requirements.txt
pyinstaller -y --log-level=WARN win_PyJibe.spec
# Run the binary (the most simple test)
dist\\PyJibe\\PyJibe.exe --version
- name: Upload windows executable
id: uploadBinaryArtifact
uses: actions/[email protected]
with:
name: pyjibe-executable
path: ./build-recipes/dist/PyJibe/PyJibe.exe
- name: Remove unsigned windows binary
run: |
rm ./build-recipes/dist/PyJibe/PyJibe.exe
- name: Sign Windows executable
uses: signpath/github-action-submit-signing-request@v1
with:
api-token: '${{ secrets.SIGNPATH_API_TOKEN }}'
organization-id: 'f4659968-cc5d-43ff-9308-df0032168ad9'
project-slug: 'PyJibe'
signing-policy-slug: 'test-signing'
github-artifact-id: '${{steps.uploadBinaryArtifact.outputs.artifact-id}}'
wait-for-completion: true
output-artifact-directory: 'build-recipes/dist/PyJibe'
parameters: |
Version: ${{ toJSON('0.15.2') }}
Release_Tag: "0.15.2"
# Version: ${{ toJSON(env.RELEASE_VERSION) }}
- name: Create Windows installer
working-directory: ./build-recipes
run: |
python win_make_iss.py
ISCC.exe /Q win_pyjibe.iss
- name: Upload windows installer
id: uploadInstallerArtifact
uses: actions/[email protected]
with:
name: pyjibe-installer
path: ./build-recipes/Output/*.exe
- name: Remove unsigned windows installer
shell: bash
run: |
rm -rf ./build-recipes/Output/*.exe
- name: Sign Windows installer
uses: signpath/github-action-submit-signing-request@v1
with:
api-token: '${{ secrets.SIGNPATH_API_TOKEN }}'
organization-id: 'f4659968-cc5d-43ff-9308-df0032168ad9'
project-slug: 'PyJibe'
signing-policy-slug: 'test-signing'
github-artifact-id: '${{steps.uploadInstallerArtifact.outputs.artifact-id}}'
wait-for-completion: true
output-artifact-directory: 'build-recipes/Output'
parameters: |
Version: ${{ toJSON('0.15.2') }}
Release_Tag: "0.15.2"
# Version: ${{ toJSON(env.RELEASE_VERSION) }}
- name: Rename windows installer to signed
shell: bash
run: |
pushd ./build-recipes/Output/
for file in *.exe ; do mv $file ${file//PyJibe/PyJibe_signed} ; done
# - name: Release Assets
# uses: softprops/action-gh-release@v1
# with:
# name: PyJibe ${{ env.RELEASE_VERSION }}
# draft: true
# prerelease: false
# append_body: |
# For signed installers, please read the [Code Signing Policy](https://pyjibe.readthedocs.io/en/stable/code_signing.html).
# files: |
# ./build-recipes/dist/*.dmg
# ./build-recipes/dist/*.pkg
# ./build-recipes/Output/*.exe