sam_oneal/pulumi-docker-build
1
0
Fork 0
Code Actions Packages Releases Wiki Activity

Add secrets and use bash

Browse Source
This commit is contained in:
Ramon Quitales
2025-01-25 00:56:13 -08:00
parent 4f7d51e581
commit 1f3e1c4d6f
2 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
.github/workflows/prerelease.yml vendored
View File

@@ -47,6 +47,11 @@ env:
GOOGLE_ZONE: us-central1-a GOOGLE_ZONE: us-central1-a
DOCKER_HUB_PASSWORD: ${{ secrets.DOCKER_HUB_PASSWORD }} DOCKER_HUB_PASSWORD: ${{ secrets.DOCKER_HUB_PASSWORD }}
IS_PRERELEASE: true IS_PRERELEASE: true
AZURE_SIGNING_CLIENT_ID: ${{ secrets.AZURE_SIGNING_CLIENT_ID }}
AZURE_SIGNING_CLIENT_SECRET: ${{ secrets.AZURE_SIGNING_CLIENT_SECRET }}
AZURE_SIGNING_TENANT_ID: ${{ secrets.AZURE_SIGNING_TENANT_ID }}
AZURE_SIGNING_KEY_VAULT_URI: ${{ secrets.AZURE_SIGNING_KEY_VAULT_URI }}
SKIP_SIGNING: ${{ secrets.AZURE_SIGNING_CLIENT_ID == '' && secrets.AZURE_SIGNING_CLIENT_SECRET == '' && secrets.AZURE_SIGNING_TENANT_ID == '' && secrets.AZURE_SIGNING_KEY_VAULT_URI == '' }}
jobs: jobs:
# prerequisites: # prerequisites:
# runs-on: ubuntu-latest # runs-on: ubuntu-latest

4
Makefile
View File

@@ -272,7 +272,7 @@ bin/jsign-6.0.jar:
sign-windows-exe-amd64: GORELEASER_ARCH := amd64_v1 sign-windows-exe-amd64: GORELEASER_ARCH := amd64_v1
sign-windows-exe-arm64: GORELEASER_ARCH := arm64 sign-windows-exe-arm64: GORELEASER_ARCH := arm64
sign-windows-exe-%: SHELL:=/bin/bash
sign-windows-exe-%: bin/jsign-6.0.jar sign-windows-exe-%: bin/jsign-6.0.jar
@# Only sign windows binary if fully configured. @# Only sign windows binary if fully configured.
@# Test variables set by joining with | between and looking for || showing at least one variable is empty. @# Test variables set by joining with | between and looking for || showing at least one variable is empty.
@@ -284,7 +284,7 @@ sign-windows-exe-%: bin/jsign-6.0.jar
echo "To rebuild with signing delete the unsigned windows exe file and rebuild with the fixed configuration"; \ echo "To rebuild with signing delete the unsigned windows exe file and rebuild with the fixed configuration"; \
if [[ "${CI}" == "true" ]]; then exit 1; fi; \ if [[ "${CI}" == "true" ]]; then exit 1; fi; \
else \ else \
file=dist/pulumi-docker-build_windows_${GORELEASER_ARCH}/pulumi-resource-docker-build.exe; \ file=dist/build-provider-sign-windows_windows_${GORELEASER_ARCH}/pulumi-resource-docker-build.exe; \
mv $${file} $${file}.unsigned; \ mv $${file} $${file}.unsigned; \
az login --service-principal \ az login --service-principal \
--username "${AZURE_SIGNING_CLIENT_ID}" \ --username "${AZURE_SIGNING_CLIENT_ID}" \