Skip to content

Windows release

Windows release #1

name: Windows release
on:
workflow_dispatch:
# for security reasons the github actions are pinned to specific release versions
jobs:
desktop_windows:
name: Windows installer
runs-on: windows-latest
defaults:
run:
working-directory: td.vue
steps:
- name: Check out
uses: actions/[email protected]
- name: Use node LTS 20.14.0
uses: actions/[email protected]
with:
node-version: '20.14.0'
- name: Cache NPM dir
uses: actions/[email protected]
with:
path: ~/.npm
key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
restore-keys: |
${{ runner.os }}-node-
${{ runner.os }}-
- name: Install clean packages
run: npm clean-install
- name: Build Windows executable
# code signing done later using Extended Verification (EV) with a hardware key
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: npm run build:desktop -- --windows --publish always
- name: Save SBOM artifact
uses: actions/[email protected]
with:
name: sboms-desktop-windows-site
path: './td.vue/dist-desktop/bundled/.sbom/*'
include-hidden-files: true
if-no-files-found: error