build.yml

name: CI - Upload Binaries

on:
  push:
  workflow_dispatch:
  release:
    types: [published]

concurrency:
    cancel-in-progress: true
    group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.ref }}

jobs:
  build_mojave:
    name: Zip and Upload Binaries
    runs-on: macos-14
    steps:
      - uses: actions/checkout@v3
      - uses: apple-actions/import-codesign-certs@8f3fb608891dd2244cdab3d69cd68c0d37a7fe93
        with:
          p12-file-base64: ${{ secrets.CERTIFICATES_P12 }}
          p12-password: ${{ secrets.CERTIFICATES_P12_PASSWORD }}
      - name: Clean, strip, and sign binaries
        run: python3 ci.py
      - name: Tag folder
        run: touch Universal-Binaries/.signed
      - name: Build DMG
        run: python3 Generate-DMG.command --sign
      - name: Generate Checksums
        run: shasum -a 256 Universal-Binaries.dmg > sha256sum.txt
      - name: Upload Universal Binaries to Artifacts
        uses: actions/upload-artifact@v3
        with:
          name: Universal Binaries
          path: Universal-Binaries.dmg
      - name: Upload Checksums to Artifacts
        uses: actions/upload-artifact@v3
        with:
          name: sha256sum.txt
          path: sha256sum.txt
      - run: |
          mkdir deploy
          mv *.dmg sha256sum.txt deploy/
      - name: Upload to Release
        if: github.event_name == 'release'
        uses: svenstaro/upload-release-action@1beeb572c19a9242f4361f4cee78f8e0d9aec5df
        with:
          file: deploy/*
          file_glob: true