Use macos-keychain GH action

Contributes to CURA-9365
This commit is contained in:
j.spijker@ultimaker.com 2022-07-02 00:35:14 +02:00 committed by Jelle Spijker
parent dee54c4eb1
commit 2cc6cc73f2
No known key found for this signature in database
GPG Key ID: 6662DC033BE6B99A

View File

@ -118,12 +118,18 @@ jobs:
run: echo -n "$GPG_PRIVATE_KEY" | base64 --decode | gpg --import run: echo -n "$GPG_PRIVATE_KEY" | base64 --decode | gpg --import
- name: Configure Macos keychain (Bash) - name: Configure Macos keychain (Bash)
id: macos-keychain
if: ${{ runner.os == 'Macos' }} if: ${{ runner.os == 'Macos' }}
run: | uses: apple-actions/import-codesign-certs@v1
CERTIFICATE_PATH=$RUNNER_TEMP/um_keychain.p12 with:
echo -n "$MACOS_CERT_P12" | base64 --decode --output $CERTIFICATE_PATH p12-file-base64: ${{ secrets.MACOS_CERT_P12 }}
security import $CERTIFICATE_PATH -P $MACOS_CERT_PASSPHRASE -A p12-password: ${{ secrets.MACOS_CERT_PASSPHRASE }}
# security unlock -p $MACOS_CERT_PASSPHRASE $CERTIFICATE_PATH
- name: Unlock Macos keychain (Bash)
if: ${{ runner.os == 'Macos' }}
run: security unlock -p $TEMP_KEYCHAIN_PASSWORD signing_temp
env:
TEMP_KEYCHAIN_PASSWORD: ${{ steps.macos-keychain.outputs.keychain-password }}
- name: Clean Conan local cache - name: Clean Conan local cache
if: ${{ inputs.conan_clean_local_cache }} if: ${{ inputs.conan_clean_local_cache }}
@ -192,13 +198,13 @@ jobs:
run: xcrun altool --notarize-app --primary-bundle-id "nl.ultimaker.cura" --username "$MAC_NOTARIZE_USER" --password "$MAC_NOTARIZE_PASS" --file "./Ultimaker-Cura.dmg" run: xcrun altool --notarize-app --primary-bundle-id "nl.ultimaker.cura" --username "$MAC_NOTARIZE_USER" --password "$MAC_NOTARIZE_PASS" --file "./Ultimaker-Cura.dmg"
working-directory: dist working-directory: dist
- name: Create the MacOS dmg (Bash) # - name: Create the MacOS dmg (Bash)
if: ${{ github.event.inputs.installer == 'true' && runner.os == 'Macos' }} # if: ${{ github.event.inputs.installer == 'true' && runner.os == 'Macos' }}
run: python ../cura_inst/packaging/dmg/dmg_sign_notarize.py # run: python ../cura_inst/packaging/dmg/dmg_sign_notarize.py
working-directory: dist # working-directory: dist
env: # env:
SOURCE_DIR: ${{ env.GITHUB_WORKSPACE }}/cura_inst # SOURCE_DIR: ${{ env.GITHUB_WORKSPACE }}/cura_inst
DIST_DIR: ${{ env.GITHUB_WORKSPACE }}/dist # DIST_DIR: ${{ env.GITHUB_WORKSPACE }}/dist
- name: Upload the artifacts - name: Upload the artifacts
uses: actions/upload-artifact@v3 uses: actions/upload-artifact@v3