diff options
author | Rob Mensching <rob@firegiant.com> | 2023-09-12 14:08:34 -0700 |
---|---|---|
committer | Rob Mensching <rob@firegiant.com> | 2023-09-13 12:39:38 -0700 |
commit | e570ce580afa981d3cf7750bea1d129309b48a06 (patch) | |
tree | 816e7daec7b5177a54e044156045bc24d9557516 /.github | |
parent | 409d3b63bff29df0859a217ba2843b85d65d2efe (diff) | |
download | wix-e570ce580afa981d3cf7750bea1d129309b48a06.tar.gz wix-e570ce580afa981d3cf7750bea1d129309b48a06.tar.bz2 wix-e570ce580afa981d3cf7750bea1d129309b48a06.zip |
Update to latest signing infrastructure
Fixes 7546
Diffstat (limited to '.github')
-rw-r--r-- | .github/workflows/build.yml | 21 |
1 files changed, 19 insertions, 2 deletions
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 47297ac5..4d10017e 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml | |||
@@ -24,6 +24,9 @@ jobs: | |||
24 | build: | 24 | build: |
25 | name: Build | 25 | name: Build |
26 | runs-on: windows-2022 | 26 | runs-on: windows-2022 |
27 | permissions: | ||
28 | packages: write | ||
29 | id-token: write | ||
27 | steps: | 30 | steps: |
28 | - name: Checkout code | 31 | - name: Checkout code |
29 | uses: actions/checkout@v3 | 32 | uses: actions/checkout@v3 |
@@ -34,6 +37,11 @@ jobs: | |||
34 | # shell: cmd | 37 | # shell: cmd |
35 | # run: ./src/vs_config.cmd | 38 | # run: ./src/vs_config.cmd |
36 | 39 | ||
40 | - name: Install sign tool | ||
41 | if: (github.ref == 'refs/heads/master') | ||
42 | shell: cmd | ||
43 | run: dotnet tool install --tool-path build\.tools sign --version 0.9.1-beta.23356.1 | ||
44 | |||
37 | - name: Configure automated logging and crash dumps | 45 | - name: Configure automated logging and crash dumps |
38 | shell: cmd | 46 | shell: cmd |
39 | run: | | 47 | run: | |
@@ -46,13 +54,22 @@ jobs: | |||
46 | reg add "HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\Windows Error Reporting\LocalDumps" /t REG_DWORD /v DumpCount /d 10 /f | 54 | reg add "HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\Windows Error Reporting\LocalDumps" /t REG_DWORD /v DumpCount /d 10 /f |
47 | reg add "HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\Windows Error Reporting\LocalDumps" /t REG_DWORD /v DumpType /d 1 | 55 | reg add "HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\Windows Error Reporting\LocalDumps" /t REG_DWORD /v DumpType /d 1 |
48 | 56 | ||
57 | - name: 'Az CLI login' | ||
58 | if: (github.ref == 'refs/heads/master') | ||
59 | uses: azure/login@v1 | ||
60 | with: | ||
61 | allow-no-subscriptions: true | ||
62 | client-id: ${{ secrets.WIX_SIGNING_CLIENTID }} | ||
63 | tenant-id: ${{ secrets.WIX_SIGNING_TENANTID }} | ||
64 | subscription-id: ${{ secrets.WIX_SIGNING_SUBSCRIPTIONID }} | ||
65 | |||
49 | - name: Build wix4 | 66 | - name: Build wix4 |
50 | shell: cmd | 67 | shell: cmd |
51 | run: ./src/build_official.cmd | 68 | run: ./src/build_official.cmd |
52 | env: | 69 | env: |
53 | RuntimeTestsEnabled: true | 70 | RuntimeTestsEnabled: true |
54 | SigningUser: ${{ github.ref == 'refs/heads/master' && secrets.WIX_SIGNING_USER || '' }} | 71 | SigningVaultUri: ${{ github.ref == 'refs/heads/master' && secrets.WIX_SIGNING_VAULTURI || '' }} |
55 | SigningSecret: ${{ github.ref == 'refs/heads/master' && secrets.WIX_SIGNING_SECRET || '' }} | 72 | SigningCertName: ${{ github.ref == 'refs/heads/master' && secrets.WIX_SIGNING_CERTNAME || '' }} |
56 | 73 | ||
57 | - name: Validate test results | 74 | - name: Validate test results |
58 | shell: cmd | 75 | shell: cmd |