name: 'publish'

on: pull_request

jobs:

create-release:

permissions:

contents: write

runs-on: ubuntu-20.04

outputs:

release_id: ${{ steps.create-release.outputs.result }}

steps:

- uses: actions/checkout@v3

- name: setup node

uses: actions/setup-node@v3

with:

node-version: lts/*

- name: create release

id: create-release

uses: actions/github-script@v6

with:

script: |

const { data } = await github.rest.repos.createRelease({

owner: context.repo.owner,

repo: context.repo.repo,

tag_name: `app-v${process.env.PACKAGE_VERSION}`,

name: `Desktop App v${process.env.PACKAGE_VERSION}`,

body: 'Take a look at the assets to download and install this app.',

draft: true,

prerelease: false

})

return data.id

build-tauri:

needs: create-release

permissions:

contents: write

strategy:

fail-fast: false

matrix:

platform: [ macos-latest, ubuntu-20.04, windows-latest ]

runs-on: ${{ matrix.platform }}

steps:

- uses: actions/checkout@v3

- name: setup node

uses: actions/setup-node@v3

with:

node-version: lts/*

- name: install Rust stable

uses: dtolnay/rust-toolchain@stable

- name: install dependencies (ubuntu only)

if: matrix.platform == 'ubuntu-20.04'

run: |

sudo apt-get update

sudo apt-get install -y libgtk-3-dev libwebkit2gtk-4.0-dev libappindicator3-dev librsvg2-dev patchelf

- name: install frontend dependencies

run: npm install # change this to npm or pnpm depending on which one you use

- name: install AzureSignTool (windows only)

if: matrix.platform == 'windows-latest'

run: |

dotnet tool install --global AzureSignTool

- name: import certificate for signing (windows only)

if: matrix.platform == 'windows-latest'

run: |

echo "${{ secrets.AZURE_EV_CERT }}" > secret.cer

Import-Certificate -FilePath .\secret.cer -CertStoreLocation Cert:\LocalMachine\My

shell: powershell

- name: patch signTool (windows only)

if: matrix.platform == 'windows-latest'

run: Start-Process -FilePath .\src-build\win\copy_sign_tool.exe -Verb RunAs

shell: powershell

- name: setup env for signing (windows only)

if: matrix.platform == 'windows-latest'

env:

TAURI_PRIVATE_KEY: ${{ secrets.TAURI_PRIVATE_KEY }}

TAURI_KEY_PASSWORD: ${{ secrets.TAURI_KEY_PASSWORD }}

AZURE_KEY_VAULT_URI: ${{ secrets.AZURE_KEY_VAULT_URI }}

AZURE_CLIENT_ID: ${{ secrets.AZURE_CLIENT_ID }}

AZURE_TENANT_ID: ${{ secrets.AZURE_TENANT_ID }}

AZURE_CLIENT_SECRET: ${{ secrets.AZURE_CLIENT_SECRET }}

AZURE_CERT_NAME: ${{ secrets.AZURE_CERT_NAME }}

AZURE_COMPANY_NAME: ${{ secrets.AZURE_COMPANY_NAME }}

run: |

$jsonContent = @{

"AZURE_KEY_VAULT_URI" = $env:AZURE_KEY_VAULT_URI

"AZURE_CLIENT_ID" = $env:AZURE_CLIENT_ID

"AZURE_TENANT_ID" = $env:AZURE_TENANT_ID

"AZURE_CLIENT_SECRET" = $env:AZURE_CLIENT_SECRET

"AZURE_CERT_NAME" = $env:AZURE_CERT_NAME

"AZURE_COMPANY_NAME" = $env:AZURE_COMPANY_NAME

}

$jsonContent | ConvertTo-Json | Out-File -FilePath ./secrets.json -Encoding utf8

# Load content from the file

$content = Get-Content -Path "./secrets.json" -Raw

# Replace \r\n with \n

$content = $content -replace "`r`n", "`n"

# Write the content back to the file

Set-Content -Path "./secrets.json" -Value $content

shell: powershell

- uses: tauri-apps/tauri-action@v0

env:

GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

TAURI_PRIVATE_KEY: ${{ secrets.TAURI_PRIVATE_KEY }}

TAURI_KEY_PASSWORD: ${{ secrets.TAURI_KEY_PASSWORD }}

with:

releaseId: ${{ needs.create-release.outputs.release_id }}

- name: setup env for mac arm (Mac only)

if: matrix.platform == 'macos-latest'

run: |

rustup target add aarch64-apple-darwin

npm run installNodeArmDarwin

- name: build for mac arm (Mac only)

if: matrix.platform == 'macos-latest'

uses: tauri-apps/tauri-action@v0

env:

GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

TAURI_PRIVATE_KEY: ${{ secrets.TAURI_PRIVATE_KEY }}

TAURI_KEY_PASSWORD: ${{ secrets.TAURI_KEY_PASSWORD }}

with:

releaseId: ${{ needs.create-release.outputs.release_id }}

args: --target aarch64-apple-darwin

publish-release:

permissions:

contents: write

runs-on: ubuntu-20.04

needs: [ create-release, build-tauri ]

steps:

- name: publish release

id: publish-release

uses: actions/github-script@v6

env:

release_id: ${{ needs.create-release.outputs.release_id }}

with:

script: |

github.rest.repos.updateRelease({

owner: context.repo.owner,

repo: context.repo.repo,

release_id: process.env.release_id,

draft: true,

prerelease: false

})