Manual Native Bundle #2
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Manual Native Bundle | |
| on: | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| id-token: write | |
| attestations: write | |
| artifact-metadata: write | |
| jobs: | |
| build: | |
| uses: ./.github/workflows/_native-build.yml | |
| with: | |
| upload-artifact-prefix: pythinker-code-native | |
| retention-days: 3 | |
| sign-macos: true | |
| # One certificate, one notary key, one set of secret names. These are the | |
| # names desktop-release.yml already ships signed and notarized from; the | |
| # APPLE_CERTIFICATE_*/APPLE_NOTARIZATION_* names this workflow used to read | |
| # were never set on this repository, which is why every darwin CLI bundle | |
| # so far shipped ad-hoc signed behind a green job. | |
| secrets: | |
| APPLE_CERTIFICATE_P12: ${{ secrets.MAC_CSC_LINK }} | |
| APPLE_CERTIFICATE_PASSWORD: ${{ secrets.MAC_CSC_KEY_PASSWORD }} | |
| APPLE_NOTARIZATION_KEY_P8: ${{ secrets.APPLE_API_KEY_P8 }} | |
| APPLE_NOTARIZATION_KEY_ID: ${{ secrets.APPLE_API_KEY_ID }} | |
| APPLE_NOTARIZATION_ISSUER_ID: ${{ secrets.APPLE_API_ISSUER }} |