mirror/yacreader
1
0
Fork 0
mirror of https://github.com/YACReader/yacreader synced 2026-04-12 15:49:53 -04:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Start signing YACReader 10 dev builds that get published
Some checks failed
Build / Initialization (push) Has been cancelled
Details
Build / Code Format Validation (push) Has been cancelled
Details
Build / Linux (Qt6) (push) Has been cancelled
Details
Build / Linux (Qt6 + 7zip) (push) Has been cancelled
Details
Build / macOS (Qt6 Universal) (push) Has been cancelled
Details
Build / Windows x64 (Qt6) (push) Has been cancelled
Details
Build / Windows ARM64 (Qt6) (push) Has been cancelled
Details
Build / Docker amd64 Image (push) Has been cancelled
Details
Build / Docker arm64 Image (push) Has been cancelled
Details
Build / Publish Dev Builds (push) Has been cancelled
Details
Build / Publish Release (push) Has been cancelled
Details
Build / Publish YACReader10 Pre-release Builds (push) Has been cancelled
Details

Browse Source
This commit is contained in:
luisangelsm
2026-03-05 22:03:05 +01:00
parent 9123029749
commit 0f4a1f950e
1 changed files with 19 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

38
.github/workflows/build.yml vendored
View File

@ -13,8 +13,8 @@ on:
- yacreader10 - yacreader10
env: env:
IS_ORIGINAL_REPO: ${{ github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop') }} IS_ORIGINAL_REPO: ${{ github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop' || github.ref == 'refs/heads/yacreader10') }}
IS_FORK: ${{ github.repository != 'YACReader/yacreader' || (github.ref != 'refs/heads/master' && github.ref != 'refs/heads/develop') }} IS_FORK: ${{ github.repository != 'YACReader/yacreader' || (github.ref != 'refs/heads/master' && github.ref != 'refs/heads/develop' && github.ref != 'refs/heads/yacreader10') }}
jobs: jobs:
# Build number generation # Build number generation
@ -141,7 +141,7 @@ jobs:
npm install -g appdmg npm install -g appdmg
- name: Import Code Signing Certificate - name: Import Code Signing Certificate
if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop') if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop' || github.ref == 'refs/heads/yacreader10')
uses: apple-actions/import-codesign-certs@v2 uses: apple-actions/import-codesign-certs@v2
with: with:
p12-file-base64: ${{ secrets.MACOS_CERTIFICATE_P12_BASE64 }} p12-file-base64: ${{ secrets.MACOS_CERTIFICATE_P12_BASE64 }}
@ -160,7 +160,7 @@ jobs:
run: ctest --test-dir build --output-on-failure run: ctest --test-dir build --output-on-failure
- name: Notarize - name: Notarize
if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop') if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop' || github.ref == 'refs/heads/yacreader10')
run: | run: |
xcrun notarytool submit *.dmg --apple-id "${{ secrets.MACOS_APPLE_ID }}" --team-id "${{ secrets.MACOS_TEAM_ID }}" --password "${{ secrets.MACOS_APP_PASSWORD }}" --wait xcrun notarytool submit *.dmg --apple-id "${{ secrets.MACOS_APPLE_ID }}" --team-id "${{ secrets.MACOS_TEAM_ID }}" --password "${{ secrets.MACOS_APP_PASSWORD }}" --wait
xcrun stapler staple *.dmg xcrun stapler staple *.dmg
@ -212,7 +212,7 @@ jobs:
ctest --test-dir build --output-on-failure ctest --test-dir build --output-on-failure
- name: Upload executables for signing - name: Upload executables for signing
if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop') if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop' || github.ref == 'refs/heads/yacreader10')
uses: actions/upload-artifact@v4 uses: actions/upload-artifact@v4
id: upload_executables id: upload_executables
with: with:
@ -223,7 +223,7 @@ jobs:
build/bin/YACReaderLibraryServer.exe build/bin/YACReaderLibraryServer.exe
- name: Sign executables with SignPath - name: Sign executables with SignPath
if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop') if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop' || github.ref == 'refs/heads/yacreader10')
uses: signpath/github-action-submit-signing-request@v1 uses: signpath/github-action-submit-signing-request@v1
with: with:
api-token: ${{ secrets.SIGNPATH_API_TOKEN }} api-token: ${{ secrets.SIGNPATH_API_TOKEN }}
@ -237,7 +237,7 @@ jobs:
output-artifact-directory: build/bin/signed output-artifact-directory: build/bin/signed
- name: Replace with signed executables - name: Replace with signed executables
if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop') if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop' || github.ref == 'refs/heads/yacreader10')
shell: pwsh shell: pwsh
run: | run: |
Write-Host "=== Replacing executables with signed versions ===" Write-Host "=== Replacing executables with signed versions ==="
@ -259,7 +259,7 @@ jobs:
.\create_installer.cmd x64 7z ${{ needs.initialization.outputs.build_number }} .\create_installer.cmd x64 7z ${{ needs.initialization.outputs.build_number }}
- name: Verify installer was created - name: Verify installer was created
if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop') if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop' || github.ref == 'refs/heads/yacreader10')
shell: pwsh shell: pwsh
run: | run: |
if (-not (Test-Path "ci/win/Output/YACReader*.exe")) { if (-not (Test-Path "ci/win/Output/YACReader*.exe")) {
@ -268,7 +268,7 @@ jobs:
Get-ChildItem "ci/win/Output/YACReader*.exe" Get-ChildItem "ci/win/Output/YACReader*.exe"
- name: Upload unsigned installer - name: Upload unsigned installer
if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop') if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop' || github.ref == 'refs/heads/yacreader10')
uses: actions/upload-artifact@v4 uses: actions/upload-artifact@v4
id: upload_unsigned id: upload_unsigned
with: with:
@ -276,7 +276,7 @@ jobs:
path: ci/win/Output/YACReader*.exe path: ci/win/Output/YACReader*.exe
- name: Submit to SignPath - name: Submit to SignPath
if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop') if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop' || github.ref == 'refs/heads/yacreader10')
uses: signpath/github-action-submit-signing-request@v1 uses: signpath/github-action-submit-signing-request@v1
with: with:
api-token: ${{ secrets.SIGNPATH_API_TOKEN }} api-token: ${{ secrets.SIGNPATH_API_TOKEN }}
@ -290,7 +290,7 @@ jobs:
output-artifact-directory: ci/win/Output/signed output-artifact-directory: ci/win/Output/signed
- name: Replace with signed installer - name: Replace with signed installer
if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop') if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop' || github.ref == 'refs/heads/yacreader10')
shell: pwsh shell: pwsh
run: | run: |
Write-Host "=== Files in signed directory before move ===" Write-Host "=== Files in signed directory before move ==="
@ -350,7 +350,7 @@ jobs:
cmake --build build --parallel cmake --build build --parallel
- name: Upload executables for signing - name: Upload executables for signing
if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop') if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop' || github.ref == 'refs/heads/yacreader10')
uses: actions/upload-artifact@v4 uses: actions/upload-artifact@v4
id: upload_executables id: upload_executables
with: with:
@ -361,7 +361,7 @@ jobs:
build/bin/YACReaderLibraryServer.exe build/bin/YACReaderLibraryServer.exe
- name: Submit to SignPath - name: Submit to SignPath
if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop') if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop' || github.ref == 'refs/heads/yacreader10')
uses: signpath/github-action-submit-signing-request@v1 uses: signpath/github-action-submit-signing-request@v1
with: with:
api-token: ${{ secrets.SIGNPATH_API_TOKEN }} api-token: ${{ secrets.SIGNPATH_API_TOKEN }}
@ -375,7 +375,7 @@ jobs:
output-artifact-directory: 'build/bin/signed' output-artifact-directory: 'build/bin/signed'
- name: Replace executables with signed versions - name: Replace executables with signed versions
if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop') if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop' || github.ref == 'refs/heads/yacreader10')
shell: pwsh shell: pwsh
run: | run: |
Copy-Item "build/bin/signed/YACReader.exe" "build/bin/YACReader.exe" -Force Copy-Item "build/bin/signed/YACReader.exe" "build/bin/YACReader.exe" -Force
@ -392,7 +392,7 @@ jobs:
.\create_installer.cmd arm64 7z ${{ needs.initialization.outputs.build_number }} .\create_installer.cmd arm64 7z ${{ needs.initialization.outputs.build_number }}
- name: Verify installer was created - name: Verify installer was created
if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop') if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop' || github.ref == 'refs/heads/yacreader10')
shell: pwsh shell: pwsh
run: | run: |
if (-not (Test-Path "ci/win/Output/YACReader*.exe")) { if (-not (Test-Path "ci/win/Output/YACReader*.exe")) {
@ -401,7 +401,7 @@ jobs:
Get-ChildItem "ci/win/Output/YACReader*.exe" Get-ChildItem "ci/win/Output/YACReader*.exe"
- name: Upload unsigned installer - name: Upload unsigned installer
if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop') if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop' || github.ref == 'refs/heads/yacreader10')
uses: actions/upload-artifact@v4 uses: actions/upload-artifact@v4
id: upload_unsigned id: upload_unsigned
with: with:
@ -409,7 +409,7 @@ jobs:
path: ci/win/Output/YACReader*.exe path: ci/win/Output/YACReader*.exe
- name: Submit to SignPath - name: Submit to SignPath
if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop') if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop' || github.ref == 'refs/heads/yacreader10')
uses: signpath/github-action-submit-signing-request@v1 uses: signpath/github-action-submit-signing-request@v1
with: with:
api-token: ${{ secrets.SIGNPATH_API_TOKEN }} api-token: ${{ secrets.SIGNPATH_API_TOKEN }}
@ -423,7 +423,7 @@ jobs:
output-artifact-directory: 'ci/win/Output/signed' output-artifact-directory: 'ci/win/Output/signed'
- name: Replace with signed installer and cleanup - name: Replace with signed installer and cleanup
if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop') if: github.repository == 'YACReader/yacreader' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop' || github.ref == 'refs/heads/yacreader10')
shell: pwsh shell: pwsh
working-directory: ci/win/Output working-directory: ci/win/Output
run: | run: |
@ -769,7 +769,7 @@ jobs:
echo " ✓ SIGNED - Signature verified successfully" echo " ✓ SIGNED - Signature verified successfully"
osslsigncode verify -in "$installer" 2>&1 | grep -E "(Signed|Signer|Timestamp)" osslsigncode verify -in "$installer" 2>&1 | grep -E "(Signed|Signer|Timestamp)"
else else
echo " ✗ UNSIGNED or INVALID - No valid signature found (expected for yacreader10 pre-releases)" echo " ✗ UNSIGNED or INVALID - No valid signature found"
osslsigncode verify -in "$installer" 2>&1 | head -20 osslsigncode verify -in "$installer" 2>&1 | head -20
fi fi
echo "" echo ""