mirror of
https://github.com/arx-research/libhalo.git
synced 2026-01-09 13:18:04 -05:00
CI: Pin 3rd party actions to exact commit ID (#89)
This commit is contained in:
committed by
GitHub
parent
372783ba5c
commit
51aa4bc85c
1
.github/CODEOWNERS
vendored
Normal file
1
.github/CODEOWNERS
vendored
Normal file
@@ -0,0 +1 @@
|
||||
.github/workflows/ @icedevml
|
||||
14
.github/workflows/build_cli.yml
vendored
14
.github/workflows/build_cli.yml
vendored
@@ -77,18 +77,20 @@ jobs:
|
||||
brew install pcsc-lite
|
||||
- name: Import codesign certificates for application (Mac OS)
|
||||
if: matrix.os == 'macos-latest' && startsWith(github.ref, 'refs/tags/halocli-v')
|
||||
uses: apple-actions/import-codesign-certs@v1
|
||||
uses: apple-actions/import-codesign-certs@253ddeeac23f2bdad1646faac5c8c2832e800071
|
||||
with:
|
||||
p12-file-base64: ${{ secrets.MACOS_CERTIFICATES_P12 }}
|
||||
p12-password: ${{ secrets.MACOS_CERTIFICATES_P12_PASSWORD }}
|
||||
- name: Checkout the repository
|
||||
if: github.event_name != 'pull_request' || matrix.os == 'ubuntu-latest'
|
||||
uses: actions/checkout@v3
|
||||
- name: Load authenticode certificate (Windows)
|
||||
- name: Load code signing certificate (Windows)
|
||||
if: matrix.os == 'windows-latest' && startsWith(github.ref, 'refs/tags/halocli-v')
|
||||
shell: bash
|
||||
run: |
|
||||
echo "${{ secrets.WINDOWS_AUTHENTICODE_P12 }}" | base64 -d > authenticode.p12
|
||||
uses: timheuer/base64-to-file@48657ba25c726c2e3dcf02efa3639fff9b3d587e
|
||||
with:
|
||||
fileName: authenticode.p12
|
||||
fileDir: ${{ env.RUNNER_TEMP }}
|
||||
encodedString: ${{ secrets.WINDOWS_AUTHENTICODE_P12 }}
|
||||
- name: Install Node.JS
|
||||
if: github.event_name != 'pull_request' || matrix.os == 'ubuntu-latest'
|
||||
uses: actions/setup-node@v3
|
||||
@@ -126,7 +128,7 @@ jobs:
|
||||
- name: Sign application for Windows
|
||||
if: matrix.os == 'windows-latest' && startsWith(github.ref, 'refs/tags/halocli-v')
|
||||
run: |
|
||||
& "C:/Program Files (x86)/Windows Kits/10/App Certification Kit/signtool.exe" sign /v /fd SHA256 /f authenticode.p12 /t http://timestamp.sectigo.com "./cli/dist/halocli.exe"
|
||||
& "C:\Program Files (x86)\Windows Kits\10\App Certification Kit\signtool.exe" sign /v /fd SHA256 /f "$Env:RUNNER_TEMP\authenticode.p12" /t http://timestamp.sectigo.com ".\cli\dist\halocli.exe"
|
||||
- name: Compress application (Windows)
|
||||
if: matrix.os == 'windows-latest' && startsWith(github.ref, 'refs/tags/halocli-v')
|
||||
run: |
|
||||
|
||||
Reference in New Issue
Block a user