maven.yml

# This workflow will build a Java project with Maven, and cache/restore any dependencies to improve the workflow execution time
# For more information see: https://help.github.com/actions/language-and-framework-guides/building-and-testing-java-with-maven

name: Java CI with Maven

on:
  workflow_dispatch:
    inputs:
      buildTarget:
        description: 'Build Target (e.g. iphone, android, etc..)'
        required: true
        default: 'iosDebug'
  push:
    tags: "*"

permissions:
  contents: read
  id-token: write

jobs:
  build:

    runs-on: macos-14

    steps:
    - uses: actions/checkout@v2
    - name: Set up JDK 11
      uses: actions/setup-java@v4
      with:
        java-version: '11'
        distribution: 'temurin'
        cache: maven
    - name: Set up Node
      uses: actions/setup-node@v4
      with:
        node-version: '22.x'
    - name: Upgrade npm for trusted publishing
      # Pin the npm major version instead of tracking npm@latest so a new npm
      # release with a higher Node engine requirement can't break this step.
      run: npm install -g npm@11
    - name: Install PHP
      run: |
        brew update
        brew install php
    - name: Install osslsigncode
      run: brew install osslsigncode
    - name: Install MacOS Certificates
      uses: apple-actions/import-codesign-certs@v1
      with: 
        p12-file-base64: ${{ secrets.MACOS_CERTIFICATE }}
        p12-password: ${{ secrets.MACOS_CERTIFICATE_PASSWORD }}
    - name: Build
      env:
        APPLE_ID: ${{ secrets.APPLE_ID }}
        APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
        APPLE_2FA_PASSWORD: ${{ secrets.APPLE_2FA_PASSWORD }}
        MACOS_CERTIFICATE: ${{ secrets.MACOS_CERTIFICATE }}
        MACOS_CERTIFICATE_PASSWORD: ${{ secrets.MACOS_CERTIFICATE_PASSWORD }}
        JDEPLOY_MAC_DEVELOPER_CERTIFICATE_NAME: ${{ secrets.DEVELOPER_ID_CERTIFICATE_NAME }}
        JDEPLOY_MAC_DEVELOPER_ID: ${{ secrets.APPLE_ID }}
        AUTHENTICODE_SPC: ${{ secrets.AUTHENTICODE_SPC }}
        AUTHENTICODE_KEY: ${{ secrets.AUTHENTICODE_KEY }}
        EV_CODESIGN_SUBMITTER_PRIVATE_KEY: ${{ secrets.EV_CODESIGN_SUBMITTER_PRIVATE_KEY }}
        EV_CODESIGN_PROCESSOR_PUBLIC_KEY: ${{ secrets.EV_CODESIGN_PROCESSOR_PUBLIC_KEY }}
      run: bash release.sh