ci.yml

name: CI

on:
  push:
    branches: ["master"]
  pull_request:
    branches: ["master"]
  merge_group:
    types: [checks_requested]

jobs:
  build:
    runs-on: windows-latest
    name: Build

    steps:
      - uses: actions/checkout@v4
        with:
          submodules: true

      - name: Setup rustup
        run: rustup target add i686-pc-windows-msvc

      - name: Build
        run: scripts/build_installer.bat

      - id: upload-unsigned
        uses: actions/upload-artifact@v4
        with:
          name: unsigned
          path: dist\windows-chewing-tsf.exe

  code-signing:
    runs-on: ubuntu-latest
    name: Code Signing
    needs: [build]
    steps:
      - uses: actions/download-artifact@v4
      - name: Sign Artifact
        uses: signpath/github-action-submit-signing-request@v0.4
        with:
          api-token: "${{ secrets.SIGNPATH_API_TOKEN }}"
          organization-id: "e8feb3e7-02b0-4e78-aa0a-f3431f374964"
          project-slug: "windows-chewing-tsf"
          signing-policy-slug: "test-signing"
          github-artifact-id: "${{ steps.upload-unsigned.outputs.artifact-id }}"
          wait-for-completion: true
          output-artifact-directory: dist\windows-chewing-tsf.exe
      - name: Upload Artifact
        uses: actions/upload-artifact@v4
        with:
          name: signed
          path: dist\windows-chewing-tsf.exe