rufus/.github/workflows/mingw.yml at master · VenusGirl/rufus · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
name: MinGW

on:
  push:
    paths-ignore:
      - '.github/ISSUE_TEMPLATE/**'
      - '.gitignore'
      - '.gitattributes'
      - 'res/**'
      - '**.cmd'
      - '**.md'
      - '**.rc'
      - '**.sh'
      - '**.txt'
      - '**.xml'
  pull_request:
    branches: [master]
    paths-ignore:
      - '.gitignore'
      - '.gitattributes'
      - 'res/**'
      - '**.cmd'
      - '**.md'
      - '**.rc'
      - '**.sh'
      - '**.txt'
      - '**.xml'

jobs:
  MinGW-Build:
    runs-on: windows-latest

    strategy:
      matrix:
        include:
          - { sys: mingw64, env: x86_64, exe: rufus.exe }
          - { sys: mingw32, env: i686, exe: rufus_x86.exe }

    defaults:
      run:
        shell: msys2 {0}

    steps:
    - name: Install MinGW
      uses: msys2/setup-msys2@v2
      with:
        msystem: ${{ matrix.sys }}
        update: true
        install: >-
          mingw-w64-${{ matrix.env }}-toolchain
          base-devel
          autotools
          git
          upx

    - name: Checkout repository
      uses: actions/checkout@v6
      with:
        fetch-depth: 0
        submodules: recursive

    - name: Set ALPHA
      id: set_alpha
      shell: bash
      if: ${{ !startsWith(github.ref, 'refs/tags/') }}
      # This ONLY works if the shell is bash or if using $env:GITHUB_OUTPUT
      run: |
        echo "option=--enable-alpha" >> $GITHUB_OUTPUT
        sed -b -i 's/VALUE "InternalName", "Rufus"/VALUE "InternalName", "Rufus (ALPHA)"/' ./src/rufus.rc

    - name: Set BETA
      id: set_beta
      shell: bash
      if: ${{ startsWith(github.ref, 'refs/tags/') && contains(github.ref, 'BETA') }}
      # This ONLY works if the shell is bash or if using $env:GITHUB_OUTPUT
      run: |
        echo "option=--enable-beta" >> $GITHUB_OUTPUT
        sed -b -i 's/VALUE "InternalName", "Rufus"/VALUE "InternalName", "Rufus (BETA)"/' ./src/rufus.rc

    - name: Build
      run: |
        ./configure --disable-debug ${{ steps.set_alpha.outputs.option }} ${{ steps.set_beta.outputs.option }}
        make -j4
        mv ./src/rufus.exe ./${{ matrix.exe }}
        strip ./${{ matrix.exe }}
        upx --lzma --best ./${{ matrix.exe }}

    - name: Prepare to sign ALPHA
      if: ${{ !startsWith(github.ref, 'refs/tags/') }}
      shell: bash
      # NB: The Base64 encoded variable should not have line breaks or this will fail!
      run: echo ${{ secrets.RUFUS_GITHUB_OFFICIAL_BUILD }} | base64 -di > ./sign.pfx

    - name: Add signtool to path
      if: ${{ !startsWith(github.ref, 'refs/tags/') }}
      uses: KamaranL/add-signtool-action@v1

    - name: Sign ALPHA
      if: ${{ !startsWith(github.ref, 'refs/tags/') }}
      shell: cmd
      run: |
        signtool sign /v /f sign.pfx /fd SHA256 /tr http://timestamp.digicert.com /td SHA256 ${{ matrix.exe }}
        del sign.pfx

    - name: Display SHA-256
      run: sha256sum ./${{ matrix.exe }}

    - name: Upload to VirusTotal
      if: ${{ github.event_name == 'push' && matrix.env == 'x86_64'  }}
      continue-on-error: true
      run: |
        curl --request POST --url https://www.virustotal.com/vtapi/v2/file/scan --form apikey=${{ secrets.VIRUSTOTAL_API_KEY }} --form file=@./${{ matrix.exe }}
        curl --request POST --url https://www.virustotal.com/api/v3/monitor/items --header 'x-apikey: ${{ secrets.VIRUSTOTAL_API_KEY }}' --form path='/${{ matrix.exe }}' --form file=@./${{ matrix.exe }}

    - name: Upload artifacts
      if: ${{ github.event_name == 'push' }}
      uses: actions/upload-artifact@v6
      with:
        name: ${{ matrix.sys }}
        path: ./*.exe

  Extra-Step-To-Merge-Artifacts-Thanks-To-Upload-Artifact-v4-Breaking-Backwards-Compatibility:
    runs-on: windows-latest
    needs: MinGW-Build
    steps:
      - name: Merge Artifacts
        uses: actions/upload-artifact/merge@v6
        if: ${{ github.event_name == 'push' }}
        with:
          name: MinGW
          delete-merged: true