|
1 | 1 | name: release |
2 | 2 | on: |
3 | 3 | release: |
4 | | - types: [published] |
| 4 | + types: [published, edited] |
5 | 5 |
|
6 | 6 | jobs: |
7 | | - release: |
| 7 | + build: |
8 | 8 | runs-on: ubuntu-latest |
9 | | - permissions: |
10 | | - contents: write |
11 | 9 | steps: |
12 | 10 | - uses: actions/checkout@v3 |
13 | 11 | - uses: actions/setup-node@v3 |
@@ -39,48 +37,83 @@ jobs: |
39 | 37 | dotnet publish src/docfx -f net7.0 -c Release /p:Version=${GITHUB_REF_NAME#v} --self-contained -r osx-x64 -o drop/publish/osx-x64 |
40 | 38 | mkdir -p drop/bin |
41 | 39 |
|
| 40 | + - run: zip -r ../../bin/docfx-win-x64-${GITHUB_REF_NAME}.zip . |
| 41 | + working-directory: drop/publish/win-x64 |
| 42 | + - run: zip -r ../../bin/docfx-linux-x64-${GITHUB_REF_NAME}.zip . |
| 43 | + working-directory: drop/publish/linux-x64 |
| 44 | + - run: zip -r ../../bin/docfx-osx-x64-${GITHUB_REF_NAME}.zip . |
| 45 | + working-directory: drop/publish/osx-x64 |
| 46 | + |
| 47 | + - uses: actions/upload-artifact@v3 |
| 48 | + with: |
| 49 | + name: nuget |
| 50 | + path: drop/nuget |
| 51 | + |
| 52 | + - uses: actions/upload-artifact@v3 |
| 53 | + with: |
| 54 | + name: publish |
| 55 | + path: drop/publish |
| 56 | + |
| 57 | + sign: |
| 58 | + runs-on: windows-latest |
| 59 | + needs: build |
| 60 | + steps: |
| 61 | + - uses: actions/setup-dotnet@v3 |
| 62 | + with: |
| 63 | + dotnet-version: 7.x |
| 64 | + |
| 65 | + - uses: actions/download-artifact@v3 |
| 66 | + with: |
| 67 | + name: nuget |
| 68 | + path: drop/nuget |
| 69 | + |
| 70 | + - uses: actions/download-artifact@v3 |
| 71 | + with: |
| 72 | + name: publish |
| 73 | + path: drop/publish |
| 74 | + |
42 | 75 | - run: dotnet tool install --tool-path . sign --version 0.9.1-beta.23274.1 |
43 | 76 |
|
44 | 77 | - run: > |
45 | 78 | ./sign code azure-key-vault |
46 | 79 | drop/nuget/**/*.* |
47 | 80 | --description "Docfx code sign" |
48 | 81 | --description-url "https://dotnet.github.io/docfx" |
49 | | - --azure-key-vault-managed-identity true |
50 | 82 | --azure-key-vault-url "${{ secrets.SIGN_KEY_VAULT_URL }}" |
51 | 83 | --azure-key-vault-certificate "${{ secrets.SIGN_KEY_VAULT_CERTIFICATE }}" |
52 | 84 | --azure-key-vault-tenant-id "${{ secrets.SIGN_KEY_VAULT_TENANT_ID }}" |
53 | 85 | --azure-key-vault-client-id "${{ secrets.SIGN_KEY_VAULT_CLIENT_ID }}" |
54 | 86 | --azure-key-vault-client-secret "${{ secrets.SIGN_KEY_VAULT_CLIENT_SECRET }}" |
55 | 87 |
|
56 | | - - run: > |
57 | | - ./sign code azure-key-vault |
58 | | - bin/**/*.* |
59 | | - --description "Docfx code sign" |
60 | | - --description-url "https://dotnet.github.io/docfx" |
61 | | - --azure-key-vault-managed-identity true |
62 | | - --azure-key-vault-url "${{ secrets.SIGN_KEY_VAULT_URL }}" |
63 | | - --azure-key-vault-certificate "${{ secrets.SIGN_KEY_VAULT_CERTIFICATE }}" |
64 | | - --azure-key-vault-tenant-id "${{ secrets.SIGN_KEY_VAULT_TENANT_ID }}" |
65 | | - --azure-key-vault-client-id "${{ secrets.SIGN_KEY_VAULT_CLIENT_ID }}" |
66 | | - --azure-key-vault-client-secret "${{ secrets.SIGN_KEY_VAULT_CLIENT_SECRET }}" |
| 88 | + - uses: actions/upload-artifact@v3 |
| 89 | + with: |
| 90 | + name: nuget-signed |
| 91 | + path: drop/nuget |
67 | 92 |
|
68 | | - - run: zip -r ../../bin/docfx-win-x64-${GITHUB_REF_NAME}.zip . |
69 | | - working-directory: drop/publish/win-x64 |
70 | | - - run: zip -r ../../bin/docfx-linux-x64-${GITHUB_REF_NAME}.zip . |
71 | | - working-directory: drop/publish/linux-x64 |
72 | | - - run: zip -r ../../bin/docfx-osx-x64-${GITHUB_REF_NAME}.zip . |
73 | | - working-directory: drop/publish/osx-x64 |
| 93 | + publish: |
| 94 | + runs-on: ubuntu-latest |
| 95 | + needs: sign |
| 96 | + permissions: |
| 97 | + contents: write |
| 98 | + steps: |
| 99 | + - uses: actions/setup-dotnet@v3 |
| 100 | + with: |
| 101 | + dotnet-version: 7.x |
74 | 102 |
|
75 | | - - uses: actions/upload-artifact@v3 |
| 103 | + - uses: actions/download-artifact@v3 |
76 | 104 | with: |
77 | | - name: nuget |
| 105 | + name: nuget-signed |
78 | 106 | path: drop/nuget |
79 | 107 |
|
80 | | - - uses: actions/upload-artifact@v3 |
| 108 | + - uses: actions/download-artifact@v3 |
81 | 109 | with: |
82 | | - name: bin |
83 | | - path: drop/bin |
| 110 | + name: publish |
| 111 | + path: drop/publish |
| 112 | + |
| 113 | + - run: | |
| 114 | + dotnet nuget push $(Pipeline.Workspace)\nuget\*.nupkg --api-key $env:NUGET_KEY --skip-duplicate --source https://nuget.org |
| 115 | + env: |
| 116 | + NUGET_KEY: $(NUGET_KEY) |
84 | 117 |
|
85 | 118 | - name: Upload GitHub release |
86 | 119 | run: | |
|
89 | 122 | gh release upload ${GITHUB_REF_NAME} drop/bin/docfx-osx-x64-${GITHUB_REF_NAME}.zip |
90 | 123 | env: |
91 | 124 | GH_TOKEN: ${{ github.token }} |
92 | | - |
93 | | - - run: | |
94 | | - dotnet nuget push $(Pipeline.Workspace)\nuget\*.nupkg --api-key $env:NUGET_KEY --skip-duplicate --source https://nuget.org |
95 | | - env: |
96 | | - NUGET_KEY: $(NUGET_KEY) |
|
0 commit comments