diff --git a/.github/workflows/desktop.release.reuse.yml b/.github/workflows/desktop.release.reuse.yml index ebaddf5c4..62f02b7e8 100644 --- a/.github/workflows/desktop.release.reuse.yml +++ b/.github/workflows/desktop.release.reuse.yml @@ -355,93 +355,6 @@ jobs: packages/desktop/dist/*.yml packages/desktop/dist/*.yaml - Windows: - runs-on: windows-latest - env: - SM_KEYPAIR_ALIAS: ${{ secrets.SM_KEYPAIR_ALIAS }} - - defaults: - run: - working-directory: packages/desktop - - steps: - - name: Code signing with Software Trust Manager - uses: digicert/ssm-code-signing@v1.0.0 - - - name: Checkout - uses: actions/checkout@v3 - - - name: Setup Node - uses: actions/setup-node@v3 - with: - registry-url: 'https://registry.npmjs.org' - node-version-file: '.nvmrc' - cache: 'yarn' - - - name: Setup Python - uses: actions/setup-python@v4 - with: - python-version: '3.10' - - - name: Install Dependencies - run: yarn install --immutable - - - name: Rebuild Electron Native Modules - run: yarn workspace @standardnotes/desktop rebuild:home-server - - - name: Build - run: yarn build:desktop - - - name: Webpack - run: yarn run webpack --config desktop.webpack.prod.js - - - name: Set up certificate - run: | - echo "${{ secrets.SM_CLIENT_CERT_FILE_B64 }}" | base64 --decode > /d/Certificate_pkcs12.p12 - shell: bash - - - name: Set variables - id: variables - run: | - export DEBUG='electron-builder' - - echo "SM_HOST=${{ secrets.SM_HOST }}" >> "$GITHUB_ENV" - echo "SM_API_KEY=${{ secrets.SM_API_KEY }}" >> "$GITHUB_ENV" - echo "SM_CLIENT_CERT_FILE=D:\\Certificate_pkcs12.p12" >> "$GITHUB_ENV" - echo "SM_CLIENT_CERT_PASSWORD=${{ secrets.SM_CLIENT_CERT_PASSWORD }}" >> "$GITHUB_ENV" - - echo "C:\Program Files (x86)\Windows Kits\10\App Certification Kit" >> $GITHUB_PATH - echo "C:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools" >> $GITHUB_PATH - echo "C:\Program Files\DigiCert\DigiCert Keylocker Tools" >> $GITHUB_PATH - shell: bash - - - name: Setup Keylocker KSP on windows - run: | - curl -X GET https://one.digicert.com/signingmanager/api-ui/v1/releases/Keylockertools-windows-x64.msi/download -H "x-api-key:%SM_API_KEY%" -o Keylockertools-windows-x64.msi - msiexec /i Keylockertools-windows-x64.msi /quiet /qn - smksp_registrar.exe list - smctl.exe keypair ls - C:\Windows\System32\certutil.exe -csp "DigiCert Signing Manager KSP" -key -user - shell: cmd - - - name: Certificates Sync - run: | - smctl windows certsync - shell: cmd - - - name: Build & Sign With Electron Builder - run: yarn run electron-builder --windows --x64 --ia32 --publish=never --c.extraMetadata.version=$(node -p "require('./../web/package.json').version") - - - name: Upload - uses: actions/upload-artifact@v4.0.0 - with: - name: dist-windows - path: | - packages/desktop/dist/*.blockmap - packages/desktop/dist/*.exe - packages/desktop/dist/*.yml - packages/desktop/dist/*.yaml - Publish: runs-on: ubuntu-latest env: