adding spdx header #288
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: CI | |
on: [ pull_request, push ] | |
jobs: | |
## Test on latest MacOS | |
# test: | |
# runs-on: macos-14 | |
# steps: | |
# - name: Checkout the code | |
# uses: actions/checkout@v2 | |
# - name: Mock GoogleService-Info.plist | |
# run: mv NOICommunity/GoogleService-Info_mock.plist NOICommunity/GoogleService-Info.plist | |
# - name: Resolve package dependencies | |
# run: xcodebuild -resolvePackageDependencies | |
# - name: List schemes (optional step to gather information) | |
# run: xcodebuild -list -project NOICommunity.xcodeproj | |
# - name: Test the app | |
# run: | | |
# set -eo pipefail | |
# xcodebuild clean test \ | |
# -scheme NOICommunity \ | |
# -destination 'platform=iOS Simulator,OS=16.2,name=iPhone 14' \ | |
# IPHONEOS_DEPLOYMENT_TARGET='16.2' \ | |
# | xcpretty | |
## Deploy to TestFlight | |
deploy_testflight: | |
name: Deploy to Testflight | |
runs-on: macos-14 | |
if: github.ref == 'refs/heads/main' | |
# needs: [ test ] | |
steps: | |
- name: Checkout the code | |
uses: actions/checkout@v2 | |
# https://docs.github.com/en/actions/deployment/deploying-xcode-applications/installing-an-apple-certificate-on-macos-runners-for-xcode-development | |
- name: Install the Apple certificate and provisioning profile | |
env: | |
BUILD_CERTIFICATE_BASE64: ${{ secrets.IOS_BUILD_CERTIFICATE_BASE64 }} | |
P12_PASSWORD: ${{ secrets.IOS_KEY_PASSPHRASE }} | |
BUILD_PROVISION_PROFILE_BASE64: ${{ secrets.IOS_PROVISION_PROFILE_BASE64 }} | |
KEYCHAIN_PASSWORD: ${{ secrets.IOS_KEY_PASSPHRASE }} | |
run: | | |
# create variables | |
CERTIFICATE_PATH=$RUNNER_TEMP/build_certificate.p12 | |
PP_PATH=$RUNNER_TEMP/build_pp.mobileprovision | |
KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain-db | |
# import certificate and provisioning profile from secrets | |
echo -n "$BUILD_CERTIFICATE_BASE64" | base64 --decode -o $CERTIFICATE_PATH | |
echo -n "$BUILD_PROVISION_PROFILE_BASE64" | base64 --decode -o $PP_PATH | |
# create temporary keychain | |
security create-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH | |
security set-keychain-settings -lut 21600 $KEYCHAIN_PATH | |
security unlock-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH | |
# import certificate to keychain | |
security import $CERTIFICATE_PATH -P "$P12_PASSWORD" -A -t cert -f pkcs12 -k $KEYCHAIN_PATH | |
security list-keychain -d user -s $KEYCHAIN_PATH | |
# apply provisioning profile | |
mkdir -p ~/Library/MobileDevice/Provisioning\ Profiles | |
cp $PP_PATH ~/Library/MobileDevice/Provisioning\ Profiles | |
# Force Xcode specific version (if needed) | |
# This action switches Xcode to the specified version. | |
# For details on available versions of Xcode, see https://github.com/actions/runner-images/blob/main/images/macos/macos-14-Readme.md. | |
# - name: Force XCode specific version | |
# run: sudo xcode-select -switch /Applications/Xcode_15.4.app | |
- name: Resolve package dependencies | |
run: xcodebuild -resolvePackageDependencies | |
- name: Inject GoogleService-Info.plist | |
env: | |
GOOGLE_SERVICE_INFO_PLIST: ${{ secrets.GOOGLE_SERVICE_INFO_PLIST }} | |
run: echo "$GOOGLE_SERVICE_INFO_PLIST" > NOICommunity/GoogleService-Info.plist | |
- name: Increment build number | |
run: | | |
set -eo pipefail | |
BUILD_NUMBER=$(date "+%Y%m%d%H%M%S") | |
/usr/libexec/PlistBuddy -c "Set :CFBundleVersion $BUILD_NUMBER" NOICommunity/Info.plist | |
# Set the -configuration parameter to one of the following options: | |
# - "Release": uses the production Keycloak server | |
# - "Release TMA": uses the testingmachine-authentication Keycloak server | |
# - "Release DEVELOPER_MENU": same as "Release" but includes the Developer Menu | |
# - "Release TMA DEVELOPER_MENU": same as "Release TMA" but includes the Developer Menu | |
- name: Archive the project | |
run: | | |
set -eo pipefail | |
xcodebuild clean archive \ | |
-configuration "Release" \ | |
-scheme NOICommunity \ | |
-sdk iphoneos \ | |
-archivePath "$PWD/build/NOICommunity.xcarchive" \ | |
-destination "generic/platform=iOS,name=Any iOS Device" | |
- name: Export .ipa | |
run: | | |
set -eo pipefail | |
xcodebuild -archivePath "$PWD/build/NOICommunity.xcarchive" \ | |
-exportOptionsPlist exportOptions.plist \ | |
-exportPath $PWD/build \ | |
-allowProvisioningUpdates \ | |
-exportArchive | |
- name: Publish the App on TestFlight | |
if: success() | |
env: | |
APPLEID_USERNAME: ${{ secrets.APPLEID_USERNAME }} | |
APPLEID_PASSWORD: ${{ secrets.APPLEID_PASSWORD }} | |
run: | | |
xcrun altool \ | |
--upload-app \ | |
-t ios \ | |
-f $PWD/build/NOICommunity.ipa \ | |
-u "$APPLEID_USERNAME" \ | |
-p "$APPLEID_PASSWORD" \ | |
--verbose | |
- name: Upload dSYMs to Firebase Crashlytics | |
if: success() | |
run: | | |
BUILD_DIR=$(xcodebuild -showBuildSettings | grep -m 1 "BUILD_DIR" | cut -d'=' -f2) | |
${BUILD_DIR%Build/*}/SourcePackages/checkouts/firebase-ios-sdk/Crashlytics/upload-symbols \ | |
-gsp "NOICommunity/GoogleService-Info.plist" \ | |
-p ios \ | |
"$PWD/build/NOICommunity.xcarchive/dSYMs" |