Skip to content

Test build workflow #15

Test build workflow

Test build workflow #15

Workflow file for this run

name: release
on:
push:
branches:
- 'dev/trusted_signing'
tags:
- 'v*.*.*'
permissions:
id-token: write
contents: read
jobs:
release:
environment: production
runs-on: windows-2022
strategy:
matrix:
configuration: [Release]
env:
DOTNET_NOLOGO: 1
DOTNET_CLI_TELEMETRY_OPTOUT: 1
DOTNET_GENERATE_ASPNET_CERTIFICATE: 0
ContinuousIntegrationBuild: true
RestoreLockedMode: true
RepositoryBranch: '${{ github.ref_name }}'
RepositoryCommit: '${{ github.sha }}'
Configuration: '${{ matrix.configuration }}'
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Setup dotnet
uses: actions/setup-dotnet@v4
with:
dotnet-version: 8
- name: Setup MSBuild
uses: microsoft/setup-msbuild@v2
- name: Cache dotnet tools
uses: actions/cache@v4
id: cache-dotnettools
with:
path: ~/.dotnet/tools
key: dotnettools
- name: Cache packages
uses: actions/cache@v4
with:
path: ~/.nuget/packages
key: NetOffice-nuget-${{ hashFiles('**/packages.lock.json') }}
restore-keys: |
NetOffice-nuget-
- name: Build information
id: build
run: .\.github\Get-BuildInfo.ps1 -ref '${{ github.ref }}' -event_name '${{ github.event_name }}' -configuration '${{ matrix.configuration }}'
- name: Azure Login
uses: azure/login@v2
- name: Build NetOffice
run: |
dotnet build Source\NetOffice.sln
env:
VersionSuffix: ${{ steps.build.outputs.app_version_suffix }}
SignOutput: ${{ steps.build.outputs.sign_binaries }}
- name: Archive NetOffice binaries
uses: actions/upload-artifact@v4
with:
name: NetOffice_binaries_v${{ steps.build.outputs.app_version_full }}_${{ matrix.configuration }}
path: '${{ github.workspace }}\Source\ClientApplication\bin\${{ matrix.configuration }}'
- name: Pack NetOffice
if: steps.build.outputs.publish_nuget == 'true'
run: |
dotnet pack --no-build --no-restore Source\NetOffice.sln -c ${{ matrix.configuration }} -o dist
env:
VersionSuffix: ${{ steps.build.outputs.app_version_suffix }}
# - name: Sign NetOffice packages
# if: success() && steps.build.outputs.publish_nuget == 'true' && steps.build.outputs.sign_binaries == 'true'
# working-directory: '${{ github.workspace}}\dist'
# run: |
# NuGetKeyVaultSignTool.exe sign *.nupkg `
# --file-digest sha256 `
# --timestamp-rfc3161 http://timestamp.digicert.com `
# --timestamp-digest sha256 `
# --azure-key-vault-url https://opensourcesigning.vault.azure.net `
# --azure-key-vault-tenant-id "${{ secrets.KEYVAULT_TENANT_ID }}" `
# --azure-key-vault-client-id "${{ secrets.KEYVAULT_CLIENT_ID }}" `
# --azure-key-vault-client-secret "${{ secrets.KEYVAULT_CLIENT_SECRET }}" `
# --azure-key-vault-certificate "goITSolutions-until-2024-01"
- name: Archive NetOffice packages
if: success()
uses: actions/upload-artifact@v4
with:
name: NetOffice_packages_v${{ steps.build.outputs.app_version_full }}
path: '${{ github.workspace }}\dist'
- name: Publish packages
if: success() && steps.build.outputs.publish_nuget == 'true'
working-directory: '${{ github.workspace}}\dist'
run: |
dotnet nuget push *.nupkg --api-key $env:NUGET_TOKEN --source https://api.nuget.org/v3/index.json
env:
NUGET_TOKEN: ${{ secrets.NUGET_TOKEN }}