executable.yml

name: Build Executables
on:
  release:
    types: [published]
jobs:
  build:
    name: Build Executables
    runs-on: macos-latest
    steps:
      - uses: actions/checkout@v3
      - uses: actions/setup-node@v4
        with:
          node-version: 14
          architecture: x64
      - run: ./scripts/executable.sh
        env:
          APPLE_DEV_CERT: ${{secrets.APPLE_DEV_CERT}}
          APPLE_ID_USERNAME: ${{secrets.APPLE_ID_USERNAME}}
          APPLE_ID_KEY: ${{secrets.APPLE_ID_KEY}}
          APPLE_CERT_KEY: ${{secrets.APPLE_CERT_KEY}}
          APPLE_TEAM_ID: ${{secrets.APPLE_TEAM_ID}}
      - name: Verify executable
        run: ./percy --version
      - name: Upload win artifact
        uses: actions/upload-artifact@v4
        with:
          name: win-exe
          path: percy.exe
      - name: Upload assets
        uses: softprops/action-gh-release@01570a1f39cb168c169c802c3bceb9e93fb10974
        with:
          files: |
            percy-osx.zip
            percy-linux.zip
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
  notify:
    needs: build
    name: Sign Win Executable
    runs-on: windows-latest
    steps:
      - uses: actions/checkout@v3
      - name: Download win artifact
        uses: actions/download-artifact@v4
        with:
          name: win-exe
      - name: Set up Node.js
        uses: actions/setup-node@v3
        with:
          node-version: 14
      - name: Install resedit
        run: npm install resedit
      - name: Update exe metadata
        run: node ./scripts/win-metadata-update.js
      - name: Sign binary
        uses: lando/code-sign-action@v3
        with:
          file: ./percy.exe
          certificate-data: ${{ secrets.WINDOWS_CERT }}
          certificate-password: ${{ secrets.WINDOWS_CERT_KEY }}
      - name: Verify executable
        run: ./percy.exe --version
      - run: |
          powershell -Command "Compress-Archive -Path 'percy.exe' -DestinationPath 'percy-win.zip'"
      - name: Upload assets
        uses: softprops/action-gh-release@01570a1f39cb168c169c802c3bceb9e93fb10974
        with:
          files: |
            percy-win.zip
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}