Spring/spring-tools
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

GHA: Sign binaries required signature. Invalidate cache for ls ext snapshot.

Browse Source
This commit is contained in:
aboyko
2023-11-17 20:46:57 -05:00
parent 6a1b8c5e35
commit 9b31b8008f
2 changed files with 7 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
.github/scripts/sign-osx-distro-file.sh vendored
View File

@@ -17,8 +17,11 @@ tar -zxf $file --directory ${dir}/${destination_folder_name}
echo "Successfully extracted ${filename}"
# sign problematic binaries
find ${dir}/${destination_folder_name}/SpringToolSuite4.app -print | grep ".*/libjansi\.jnilib$" | codesign --verbose --deep --force --timestamp --entitlements "${entitlements}" --options=runtime --keychain "${KEYCHAIN}" -s "${MACOS_CERTIFICATE_ID}"
find ${dir}/${destination_folder_name}/SpringToolSuite4.app -print | grep ".*/fsevents\.node$" | codesign --verbose --deep --force --timestamp --entitlements "${entitlements}" --options=runtime --keychain "${KEYCHAIN}" -s "${MACOS_CERTIFICATE_ID}"
for file in `find ${dir}/${destination_folder_name}/SpringToolSuite4.app -print | grep -E ".*/(libjansi\.jnilib|fsevents\.node)$"`
do
echo "Signing binary file: ${file}"
codesign --verbose --deep --force --timestamp --entitlements "${entitlements}" --options=runtime --keychain "${KEYCHAIN}" -s "${MACOS_CERTIFICATE_ID}" $file
done
# Sign the app
codesign --verbose --deep --force --timestamp --entitlements "${entitlements}" --options=runtime --keychain "${KEYCHAIN}" -s "${MACOS_CERTIFICATE_ID}" ${dir}/${destination_folder_name}/SpringToolSuite4.app

4
.github/workflows/eclipse-ls-extensions-build.yml vendored
View File

@@ -100,7 +100,7 @@ jobs:
aws s3 rm s3://dist.springsource.com/${p2_path}/ --recursive
aws s3 cp ${{ github.workspace }}/eclipse-language-servers/org.springframework.tooling.ls.integration.repository/target/repository/ s3://dist.springsource.com/${p2_path}/ --recursive --acl public-read --no-progress
- name: Compute invalid URLs
# if: ${{ inputs.build_type != 'snapshot' }}
if: ${{ inputs.build_type != 'snapshot' }}
id: compute-invalid-urls
run: |
invalid_urls=`aws s3 ls s3://tools-spring-io/${{ steps.upload-p2-to-akamai.outputs.p2_path }}/ --recursive | awk '{$1=$2=$3=""; print $0}' | sed -e 's/^[ \t]*/https:\/\/cdn.spring.io\/spring-tools\//' | paste -sd' ' -`
@@ -124,7 +124,7 @@ jobs:
purge_cache:
needs: [ eclipse-language-servers-build ]
# if: ${{ inputs.build_type != 'snapshot' }}
if: ${{ inputs.build_type != 'snapshot' }}
runs-on: [self-hosted, macOS]
steps:
- uses: ./.github/actions/akamai-purge-osx