.github/workflows/cd-store-stable.yml - main - githubmirror/Files

.github/workflows/cd-store-stable.yml
152 строки5 KB
Yair
Code Quality: Exclude NuGet.Config during artifact signing
08 июн 2026, 01:42
08 июн 2026, 01:42170134d
# Copyright (c) Files Community
# Licensed under the MIT License.

# Abstract:
#  Deploys Files (Store).
#
# Workflow:
#  1. Configure manifest, logo and secrets
#  2. Restore, build and package Files
#  3. Generate a msixupload file
#  4. Publish the msixupload to GitHub Actions

name: Files CD (Store Stable)

on:
  workflow_dispatch:

jobs:
  build:
    runs-on: windows-2025-vs2026
    environment: Deployments
    strategy:
      fail-fast: false
      matrix:
        configuration: [Release]
        platform: [x64]
    env:
      SOLUTION_NAME:              'Files.slnx'
      CONFIGURATION:              '${{ matrix.configuration }}'
      PLATFORM:                   '${{ matrix.platform }}'
      APPX_BUNDLE_PLATFORMS:      'x64|arm64'
      WORKING_DIR:                '${{ github.workspace }}' # D:\a\Files\Files\
      ARTIFACTS_STAGING_DIR:      '${{ github.workspace }}\artifacts'
      APPX_PACKAGE_DIR:           '${{ github.workspace }}\artifacts\AppxPackages\'
      APP_PROJECT_PATH:           '${{ github.workspace }}\src\Files.App\Files.App.csproj'
      PACKAGE_MANIFEST_PATH:      '${{ github.workspace }}\src\Files.App\Package.appxmanifest'
      LAUNCHER_PROJECT_PATH:      'src\Files.App.Launcher\Files.App.Launcher.vcxproj'

    steps:
    - name: Checkout the repository
      uses: actions/checkout@v6
    - name: Setup MSBuild
      uses: microsoft/setup-msbuild@v3
    - name: Setup NuGet
      uses: NuGet/setup-nuget@v3
    - name: Setup .NET
      uses: actions/setup-dotnet@v5
      with:
        global-json-file: global.json

    - name: Configure the package manifest, logo, and secrets
      shell: pwsh
      run: |
        . './.github/scripts/Configure-AppxManifest.ps1' `
          -Branch "StoreStable" `
          -PackageManifestPath "$env:PACKAGE_MANIFEST_PATH" `
          -Publisher "$env:STORE_PUBLISHER_SECRET" `
          -WorkingDir "$env:WORKING_DIR" `
          -SecretBingMapsKey "$env:SECRET_BINGMAPS_KEY" `
          -SecretSentry "$env:SECRET_SENTRY" `
          -SecretGitHubOAuthClientId "$env:SECRET_GITHUB_OAUTH_CLIENT_ID"
      env:
        STORE_PUBLISHER_SECRET: ${{ secrets.STORE_PUBLISHER_SECRET }}
        SECRET_BINGMAPS_KEY: ${{ secrets.BING_MAPS_SECRET }}
        SECRET_SENTRY: ${{ secrets.SENTRY_SECRET }}
        SECRET_GITHUB_OAUTH_CLIENT_ID: ${{ secrets.GH_OAUTH_CLIENT_ID }}

    - name: Restore Files
      shell: pwsh
      run: |
        msbuild $env:SOLUTION_NAME `
        -t:Restore `
        -p:Platform=$env:PLATFORM `
        -p:Configuration=$env:CONFIGURATION `
        -p:PublishReadyToRun=true `
        -v:quiet

    - name: Restore NuGet Packages for Launcher Project
      shell: pwsh
      run: |
        nuget restore "$env:LAUNCHER_PROJECT_PATH" `
          -SolutionDirectory "$env:WORKING_DIR" `
          -Verbosity detailed

    - name: Build launcher project
      shell: pwsh
      run: |
        msbuild "$env:LAUNCHER_PROJECT_PATH" `
        -t:Build `
        -p:Platform=$env:PLATFORM `
        -p:Configuration=$env:CONFIGURATION `
        -v:quiet

    - name: Hide NuGet.Config from signing action
      shell: pwsh
      run: Move-Item NuGet.Config NuGet.Config.bak

    - name: Sign launcher EXE with Azure Trusted Signing
      uses: Azure/artifact-signing-action@v1
      with:
        azure-tenant-id: ${{ secrets.AZURE_TENANT_ID }}
        azure-client-id: ${{ secrets.AZURE_CLIENT_ID }}
        azure-client-secret: ${{ secrets.AZURE_CLIENT_SECRET }}
        endpoint: https://eus.codesigning.azure.net/
        signing-account-name: ${{ secrets.SIGNING_ACCOUNT_NAME }}
        certificate-profile-name: ${{ secrets.SIGNING_PROFILE_NAME }}
        files-folder: ${{ github.workspace }}\src\Files.App\Assets\FilesOpenDialog
        files-folder-filter: "*.exe"
        files-folder-recurse: false
        file-digest: SHA256
        timestamp-rfc3161: http://timestamp.acs.microsoft.com
        timestamp-digest: SHA256

    - name: Restore NuGet.Config
      if: always()
      shell: pwsh
      run: Move-Item NuGet.Config.bak NuGet.Config

    - name: Build & package Files
      shell: pwsh
      run: |
        $platforms = "$env:APPX_BUNDLE_PLATFORMS" -split '\|'
        foreach ($plat in $platforms) {
          Write-Host "Building for $plat..."
          msbuild "$env:APP_PROJECT_PATH" `
            -t:Build `
            -p:Platform=$plat `
            -p:Configuration=$env:CONFIGURATION `
            -p:AppxPackageDir="$env:APPX_PACKAGE_DIR" `
            -p:AppxBundle=Never `
            -p:GenerateAppxPackageOnBuild=true `
            -p:UapAppxPackageBuildMode=StoreUpload `
            -v:quiet
        }

    - name: Create msixbundle and msixupload
      shell: pwsh
      run: |
        . './.github/scripts/Create-MsixBundle.ps1' `
          -AppxPackageDir "$env:APPX_PACKAGE_DIR" `
          -BundleName "Files.Package" `
          -BuildMode "StoreUpload"

    - name: Remove empty files from the packages
      shell: bash
      run: find $ARTIFACTS_STAGING_DIR -empty -delete

    - name: Upload the packages to GitHub Actions
      uses: actions/upload-artifact@v7
      with:
        name: 'Appx Packages (${{ env.CONFIGURATION }}, ${{ env.PLATFORM }})'
        path: ${{ env.ARTIFACTS_STAGING_DIR }}