build-and-release-win.yml

name: Release for Windows

on: [ push, pull_request ]

env:
  ACTIONS_ALLOW_UNSECURE_COMMANDS: true

jobs:
  release_linux:
    runs-on: ${{ matrix.os }}

    strategy:
      matrix:
        os: [ windows-latest ]

    steps:
      - name: Check out Git repository
        uses: actions/checkout@v2

      - name: Install Node.js, NPM and Yarn
        uses: actions/setup-node@v1
        with:
          node-version: '16.x'

      - run: yarn install
      - run: yarn add -D esbuild@0.14.54
      - run: yarn test
      - run: yarn lint
      - run: yarn build-all
      - run: yarn cli --help
      - run: yarn dev:cli --help

      - name: Build native executable
        if: ${{ startsWith(matrix.os, 'windows') && startsWith(github.ref, 'refs/tags/v') }}
        run: yarn install --network-timeout 1000000 && yarn package-win
        env:
          GH_TOKEN: ${{ secrets.github_token }}

      #      - name: Setup dotnet env for signing
      #        if: ${{ startsWith(matrix.os, 'windows') && startsWith(github.ref, 'refs/tags/v') }}
      #        uses: actions/setup-dotnet@v1
      #        with:
      #          dotnet-version: ${{ env.DOTNET_VERSION }}
      #
      #      - name: Get files to sign
      #        if: ${{ startsWith(matrix.os, 'windows') && startsWith(github.ref, 'refs/tags/v') }}
      #        run: (Get-ChildItem -File bin/win | where {$_.extension -in ".exe"}).FullName >> bin/win/files-to-sign.txt
      #
      #      - name: Sign with azure service
      #        if: ${{ startsWith(matrix.os, 'windows') && startsWith(github.ref, 'refs/tags/v') }}
      #        uses: fluffy-bunny/action-azuresigntool@v0.1dev
      #        with:
      #          azure_sign_tool_credentials: ${{ secrets.AZURE_SIGN_TOOL_CREDENTIALS_MANAGED_IDENTITY }}
      #          azure_sign_tool_assembly: tools/AzureSignTool-DEV/netcoreapp2.1/any/AzureSignTool.dll
      #          files_to_sign: bin/win/files-to-sign.txt

      - name: Release assets
        if: ${{ startsWith(matrix.os, 'windows') && startsWith(github.ref, 'refs/tags/v') }}
        uses: ncipollo/release-action@v1
        with:
          draft: true
          allowUpdates: true
          artifacts: "bin/win/*.exe"
          token: ${{ secrets.GITHUB_TOKEN }}