verify and mdsnippets (#1) #17
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build | |
| on: [push, pull_request, workflow_dispatch] | |
| permissions: | |
| id-token: write | |
| contents: read | |
| jobs: | |
| build: | |
| runs-on: ${{ matrix.os }} | |
| strategy: | |
| matrix: | |
| os: | |
| - windows-latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| - name: Setup .NET | |
| uses: actions/setup-dotnet@v3 | |
| with: | |
| dotnet-version: 8.0.x | |
| - name: Restore dependencies | |
| run: dotnet restore | |
| - name: Build | |
| run: dotnet build --no-restore --configuration Release | |
| - name: Pack | |
| run: dotnet pack --output artifacts --no-restore --no-build --configuration Release | |
| - name: Azure login | |
| uses: azure/login@v2 | |
| with: | |
| client-id: ${{ secrets.AZURE_CLIENT_ID }} | |
| tenant-id: ${{ secrets.AZURE_TENANT_ID }} | |
| subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }} | |
| - name: Download Sign CLI | |
| run: | | |
| mkdir bin | |
| az storage blob download --blob-url ${{ secrets.SIGN_CLI_ZIP }} --auth-mode login --file bin/Sign.Cli.zip | |
| - name: Unzip Sign CLI | |
| shell: pwsh | |
| run: Expand-Archive -Force bin/Sign.Cli.zip bin/Sign.Cli | |
| - name: Run Sign CLI | |
| shell: pwsh | |
| run: | | |
| & "bin\Sign.Cli\sign.exe" code azcodesign artifacts\* ` | |
| -acsu "${{ secrets.TRUSTED_SIGNING_ENDPOINT }}" ` | |
| -acsa "${{ secrets.TRUSTED_SIGNING_ACCOUNT }}" ` | |
| -acscp "${{ secrets.TRUSTED_SIGNING_PROFILE }}" ` | |
| -v "Debug" ` | |
| -d "Knapcode.PackageLifeCycle" ` | |
| -u "https://www.nuget.org/packages/Knapcode.PackageLifeCycle" ` | |
| --azcodesign-managed-identity ` | |
| --file-list sign-file-list.txt | |
| - name: Extract .cer file | |
| shell: pwsh | |
| run: | | |
| dotnet tool install --global Knapcode.CertificateExtractor | |
| $nupkg = gci artifacts\*.nupkg | |
| nuget-cert-extractor --file $nupkg --output artifacts --code-signing --author --leaf | |
| - uses: actions/upload-artifact@v3 | |
| name: Upload artifacts | |
| with: | |
| name: ${{ matrix.os }}-artifacts | |
| path: artifacts/ | |
| - name: Upload Test Results | |
| if: failure() | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: verify-test-results | |
| path: | | |
| **/*.received.* |