@@ -132,7 +132,7 @@ jobs:
132
132
- name : Create autoupdate files for win32
133
133
run : go-selfupdate -platform windows-${{ matrix.arch }} ${{ env.PROJECT_NAME }}${{ matrix.ext }} ${TAG_VERSION}
134
134
if : matrix.arch == '386' && matrix.os == 'windows-2019' && steps.prerelease.outputs.IS_PRE != 'true'
135
-
135
+
136
136
- name : configure aws credentials
137
137
uses : aws-actions/configure-aws-credentials@v4
138
138
with :
@@ -311,7 +311,7 @@ jobs:
311
311
run : |
312
312
wget -q https://github.com/Bearer/gon/releases/download/v0.0.27/gon_macos.zip
313
313
unzip gon_macos.zip -d /usr/local/bin
314
-
314
+
315
315
- name : Write gon config to file
316
316
run : |
317
317
cat > "${{ env.GON_CONFIG_PATH }}" <<EOF
@@ -323,7 +323,7 @@ jobs:
323
323
}
324
324
325
325
EOF
326
-
326
+
327
327
- name : Notarize app bundle
328
328
run : |
329
329
gon -log-level=debug -log-json "${{ env.GON_CONFIG_PATH }}"
@@ -449,17 +449,17 @@ jobs:
449
449
# We are hardcoding the path for signtool because is not present on the windows PATH env var by default.
450
450
# Keep in mind that this path could change when upgrading to a new runner version
451
451
SIGNTOOL_PATH : " C:/Program Files (x86)/Windows Kits/10/bin/10.0.19041.0/x86/signtool.exe"
452
-
452
+
453
453
strategy :
454
454
matrix :
455
455
arch : [amd64, 386]
456
-
456
+
457
457
steps :
458
458
- name : Download artifact
459
459
uses : actions/download-artifact@v4
460
460
with :
461
461
name : ArduinoCreateAgent-windows-${{ matrix.arch }}
462
-
462
+
463
463
- name : Save Win signing certificate to file
464
464
run : echo "${{ secrets.INSTALLER_CERT_WINDOWS_CER }}" | base64 --decode > ${{ env.INSTALLER_CERT_WINDOWS_CER}}
465
465
@@ -468,7 +468,7 @@ jobs:
468
468
CERT_PASSWORD : ${{ secrets.INSTALLER_CERT_WINDOWS_PASSWORD }}
469
469
CONTAINER_NAME : ${{ secrets.INSTALLER_CERT_WINDOWS_CONTAINER }}
470
470
# https://stackoverflow.com/questions/17927895/automate-extended-validation-ev-code-signing-with-safenet-etoken
471
- run : |
471
+ run : |
472
472
"${{ env.SIGNTOOL_PATH }}" sign -d "Arduino Create Agent" -f ${{ env.INSTALLER_CERT_WINDOWS_CER}} -csp "eToken Base Cryptographic Provider" -k "[{{${{ env.CERT_PASSWORD }}}}]=${{ env.CONTAINER_NAME }}" -fd sha256 -tr http://timestamp.digicert.com -td SHA256 -v "ArduinoCreateAgent-${GITHUB_REF##*/}-windows-${{ matrix.arch }}-installer.exe"
473
473
474
474
- name : Upload artifacts
@@ -478,6 +478,10 @@ jobs:
478
478
name : ArduinoCreateAgent-windows-${{ matrix.arch }}-signed
479
479
path : ArduinoCreateAgent-*-windows-${{ matrix.arch }}-installer.exe
480
480
481
+ # This step is needed because the self hosted runner does not delete files automatically
482
+ - name : Clean up EXE
483
+ run : rm ArduinoCreateAgent-*-windows-${{ matrix.arch }}-installer.exe
484
+
481
485
# This job will generate a dmg mac installer, sign/notarize it.
482
486
generate-sign-dmg :
483
487
needs : notarize-macos
0 commit comments