fix(ci): 修复 SignPath 代码签名 artifact 参数错误
SignPath GitHub Action 不支持 github-artifact-name 参数, 改用 github-artifact-id 并通过 GitHub API 获取 artifact ID。 - 移除 download-artifact 步骤(SignPath 直接从 GitHub 获取) - 添加 get-artifact 步骤通过 API 获取 artifact ID - 使用 github-artifact-id 替代无效的 github-artifact-name
This commit is contained in:
29
.github/workflows/release-editor.yml
vendored
29
.github/workflows/release-editor.yml
vendored
@@ -156,18 +156,25 @@ jobs:
|
|||||||
if: steps.check-signpath.outputs.enabled == 'true'
|
if: steps.check-signpath.outputs.enabled == 'true'
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v4
|
||||||
|
|
||||||
- name: Download Windows artifact
|
- name: Get artifact ID
|
||||||
if: steps.check-signpath.outputs.enabled == 'true'
|
|
||||||
uses: actions/download-artifact@v4
|
|
||||||
with:
|
|
||||||
name: windows-unsigned
|
|
||||||
path: ./artifacts
|
|
||||||
|
|
||||||
- name: List artifacts for signing
|
|
||||||
if: steps.check-signpath.outputs.enabled == 'true'
|
if: steps.check-signpath.outputs.enabled == 'true'
|
||||||
|
id: get-artifact
|
||||||
|
env:
|
||||||
|
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||||
run: |
|
run: |
|
||||||
echo "Files to be signed:"
|
# 获取 windows-unsigned artifact 的 ID
|
||||||
find ./artifacts -type f \( -name "*.exe" -o -name "*.msi" \) | head -20
|
ARTIFACT_ID=$(gh api \
|
||||||
|
-H "Accept: application/vnd.github+json" \
|
||||||
|
"/repos/${{ github.repository }}/actions/runs/${{ github.run_id }}/artifacts" \
|
||||||
|
--jq '.artifacts[] | select(.name == "windows-unsigned") | .id')
|
||||||
|
|
||||||
|
if [ -z "$ARTIFACT_ID" ]; then
|
||||||
|
echo "Error: Could not find artifact 'windows-unsigned'"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "artifact-id=$ARTIFACT_ID" >> $GITHUB_OUTPUT
|
||||||
|
echo "Found artifact ID: $ARTIFACT_ID"
|
||||||
|
|
||||||
- name: Submit to SignPath for code signing
|
- name: Submit to SignPath for code signing
|
||||||
if: steps.check-signpath.outputs.enabled == 'true'
|
if: steps.check-signpath.outputs.enabled == 'true'
|
||||||
@@ -179,7 +186,7 @@ jobs:
|
|||||||
project-slug: 'ecs-framework'
|
project-slug: 'ecs-framework'
|
||||||
signing-policy-slug: 'test-signing'
|
signing-policy-slug: 'test-signing'
|
||||||
artifact-configuration-slug: 'default'
|
artifact-configuration-slug: 'default'
|
||||||
github-artifact-name: 'windows-unsigned'
|
github-artifact-id: ${{ steps.get-artifact.outputs.artifact-id }}
|
||||||
wait-for-completion: true
|
wait-for-completion: true
|
||||||
wait-for-completion-timeout-in-seconds: 600
|
wait-for-completion-timeout-in-seconds: 600
|
||||||
output-artifact-directory: './signed'
|
output-artifact-directory: './signed'
|
||||||
|
|||||||
Reference in New Issue
Block a user