publish.yml

name: Publish Package
on:
  push:
    branches: [ ta/sc-222947/maui-support-squashed-build-testing-mac-runner-only ]
    paths-ignore:
      - '**.md' #Do not need to run CI for markdown changes.
  pull_request:
    branches: [ ta/sc-222947/maui-support-squashed-build-testing-mac-runner-only ]
    paths-ignore:
      - '**.md'
  # workflow_dispatch:
  #   inputs:
  #     prerelease:
  #       description: 'Is this a prerelease.' # use this to control publish tag, for instance NPM wouldn't set latest.
  #       type: boolean
  #       required: true
  #     dry_run:
  #       description: 'Is this a dry run. If so no package will be published.'
  #       type: boolean
  #       required: true

jobs:
  build-publish:
    runs-on: macos-latest-large
    permissions:
      id-token: write
      contents: read
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0 # If you only need the current version keep this

      - uses: launchdarkly/gh-actions/actions/release-secrets@release-secrets-v1.0.0
        name: Get secrets
        with:
          aws_assume_role: ${{ vars.AWS_ROLE_ARN }}
          ssm_parameter_pairs: '/production/common/releasing/digicert/host = DIGICERT_HOST,/production/common/releasing/digicert/api_key = DIGICERT_API_KEY,/production/common/releasing/digicert/client_cert_file_b64 = DIGICERT_CLIENT_CERT_FILE_B64,/production/common/releasing/digicert/client_cert_password = DIGICERT_CLIENT_CERT_PASSWORD,/production/common/releasing/digicert/code_signing_cert_sha1_hash = DIGICERT_CODE_SIGNING_CERT_SHA1_HASH'

      # - name: CI check
      #   uses: ./.github/actions/ci

      - name: Publish Package
        uses: ./.github/actions/publish
        with:
          # signingHost: $DIGICERT_HOST
          # signingApiKey: $DIGICERT_API_KEY
          # certFileBase64: $DIGICERT_CLIENT_CERT_FILE_B64
          # certPassword: $DIGICERT_CLIENT_CERT_PASSWORD
          # certSha1Hash: $DIGICERT_CODE_SIGNING_CERT_SHA1_HASH
          prerelease: ${{ inputs.prerelease }}
          dry_run: ${{ inputs.dry_run }}

      - name: 'Upload Artifact'
        uses: actions/upload-artifact@v3
        with:
          name: my-artifact
          path: /Users/runner/hostedtoolcache/smctl/latest/
          retention-days: 1