nightly-build.yml

name: Nightly Build

on:
  push:
    branches:
      - main

jobs:

  #Reuse ci.yml workflow on main branch and upload artifacts to release page
  reuse_main_ci:
    uses: ./.github/workflows/ci.yml
    secrets: inherit

  upload_nighly_builds:

    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        os: [ macos-latest]
        python-version: [ 3.11 ]
    needs: reuse_main_ci

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Retrieve saved artifacts
        uses: actions/download-artifact@v3
        with:
          path: installers/dist

      - name: Display structure of downloaded files
        run: ls -R
        working-directory: installers/dist

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: ${{ matrix.python-version }}

      - name: Sign executable and create dmg (OSX)
        if: ${{ matrix.installer && startsWith(matrix.os, 'macos') }}
        env:
          MACOS_CERTIFICATE: ${{ secrets.MACOS_CERTIFICATE }}
          MACOS_CERTIFICATE_PWD: ${{ secrets.MACOS_CERTIFICATE_PWD }}
        run: |
          echo $MACOS_CERTIFICATE | base64 --decode > certificate.p12
          security create-keychain -p DloaAcYP build.keychain
          security default-keychain -s build.keychain
          security unlock-keychain -p DloaAcYP build.keychain
          security import certificate.p12 -k build.keychain -P $MACOS_CERTIFICATE_PWD -T /usr/bin/codesign
          security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k DloaAcYP build.keychain

          cd installers/dist
          python ../../build_tools/fix_qt_folder_names_for_codesign.py SasView5.app
          python  ../../build_tools/code_sign_osx.py
          codesign --verify --options=runtime --entitlements ../../build_tools/entitlements.plist --timestamp --deep --verbose=4 --force --sign "Developer ID Application: European Spallation Source Eric (W2AG9MPZ43)" SasView5.app
          hdiutil create SasView5.dmg -srcfolder SasView5.app -ov -format UDZO
          codesign -s "Developer ID Application: European Spallation Source Eric (W2AG9MPZ43)" SasView5.dmg
          
      - name: Rename artifacts
        run: |
          mv installers/dist/SasView-Installer-windows-*/setupSasView.exe installers/dist/setupSasView-nightly-Win64.exe
          mv installers/dist/SasView-Installer-macos-*/SasView6.dmg installers/dist/SasView-nightly-MacOSX.dmg
          mv installers/dist/SasView-Installer-ubuntu-*/sasview6.tar.gz installers/dist/SasView-nightly-Linux.tar.gz

      - name: Notarize Release Build (OSX)
        uses: lando/notarize-action@v2
        with:
            product-path: "installers/dist/SasView-nightly-MacOSX.dmg"
            primary-bundle-id: "org.sasview.SasView6"
            appstore-connect-username: ${{ secrets.NOTARIZATION_USERNAME }}
            appstore-connect-password: ${{ secrets.NOTARIZATION_PASSWORD }}
            appstore-connect-team-id: W2AG9MPZ43
            verbose: True

      - name: Staple Release Build (OSX)
        uses: BoundfoxStudios/action-xcode-staple@v1
        with:
          product-path: "installers/dist/SasView-nightly-MacOSX.dmg"

      - name: Upload Nightly Build Installer to GitHub releases
        uses: ncipollo/release-action@v1
        with:
          draft: false
          prerelease: true
          allowUpdates: true
          replacesArtifacts: true
          token: ${{ secrets.GITHUB_TOKEN }}
          artifacts: "installers/dist/setupSasView-nightly-Win64.exe, installers/dist/SasView-nightly-MacOSX.dmg, installers/dist/SasView-nightly-Linux.tar.gz"
          body: "Nightly build of main SasView branch"
          name: "nightly-build"
          tag: "nightly-build"