release.yml

name: Release

on:
  release:
    types: [created]

jobs:
  release:
    runs-on: ${{matrix.os}}
    permissions:
      contents: read
      packages: write
    strategy:
      matrix:
        os: [macos-latest, windows-latest, ubuntu-latest]
    steps:
      - uses: actions/checkout@v2
      - uses: actions/setup-node@v2
        with:
          node-version: 16
      - name: Install required build toolchain
        if: matrix.os == 'ubuntu-latest'
        run: sudo apt-get install -y libarchive-tools snapd

      - name: Install snapcraft
        if: matrix.os == 'ubuntu-latest'
        run: sudo snap install snapcraft --classic
        
      - name: Login into snapcraft
        if: matrix.os == 'ubuntu-latest'
        run: |
          echo "$SNAPCRAFT_TOKEN" > $RUNNER_TEMP/snapcraft-token
          snapcraft login --with $RUNNER_TEMP/snapcraft-token
        env:
          SNAPCRAFT_TOKEN: ${{ secrets.SNAPCRAFT_TOKEN }}

      - name: Configure Fontawesome
        uses: DamianReeves/write-file-action@v1.0
        with:
          path: .npmrc
          contents: |
            //npm.pkg.github.com/:_authToken=${{ secrets.GHR_TOKEN }}
            //npm.fontawesome.com/:_authToken=${{ secrets.FONTAWESOME_TOKEN }}
          write-mode: append
      - name: Install the Apple certificate and provisioning profile
        if: matrix.os == 'macos-latest'
        env:
          BUILD_CERTIFICATE_BASE64: ${{ secrets.BUILD_CERTIFICATE_BASE64 }}
          KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }}
          APPLE_API_KEY: ${{ secrets.APPLE_API_KEY }}
        run: |
          # create variables
          CERTIFICATE_PATH=$RUNNER_TEMP/build_certificate.p12
          KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain-db
          AUTHKEY_PATH=$RUNNER_TEMP/authkey.p8
          
          echo -n "$APPLE_API_KEY" > $AUTHKEY_PATH
          # import certificate and provisioning profile from secrets
          echo -n "$BUILD_CERTIFICATE_BASE64" | base64 --decode --output $CERTIFICATE_PATH
          # create temporary keychain
          security create-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
          security set-keychain-settings -lut 21600 $KEYCHAIN_PATH
          security unlock-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
          # import certificate to keychain
          security import $CERTIFICATE_PATH -P "" -A -t cert -f pkcs12 -k $KEYCHAIN_PATH
          security list-keychain -d user -s $KEYCHAIN_PATH
      - run: cat $RUNNER_TEMP/authkey.p8
        if: matrix.os == 'macos-latest'
      - uses: pnpm/action-setup@v2.0.1
        with:
          version: "6.x"
          run_install: true
      - run: pnpm run build:publish
        env:
          APPLE_API_KEY: ${{ runner.temp }}/authkey.p8
          APPLE_API_KEY_ID: ${{ secrets.APPLE_API_KEY_ID }}
          APPLE_API_KEY_ISSUER: ${{ secrets.APPLE_API_KEY_ISSUER }}
          DO_KEY_ID: ${{ secrets.DO_KEY_ID }}
          DO_SECRET_KEY: ${{ secrets.DO_SECRET_KEY }}
          TEAM_SHORT_NAME: ${{ secrets.TEAM_SHORT_NAME }}
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}