This repository was archived by the owner on Jul 16, 2026. It is now read-only.
ci: add entitlements.plist for macOS codesign #5
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release | |
| on: | |
| push: | |
| tags: | |
| - "v*" | |
| permissions: | |
| contents: write | |
| jobs: | |
| build-linux-windows: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v5 | |
| - uses: oven-sh/setup-bun@v2 | |
| with: | |
| bun-version: latest | |
| - name: Install dependencies | |
| run: bun install --frozen-lockfile | |
| - name: Build web frontend | |
| run: bun run build:web | |
| - name: Build Linux and Windows binaries | |
| run: | | |
| bun scripts/build.ts --target bun-linux-x64 | |
| bun scripts/build.ts --skip-web --target bun-linux-arm64 | |
| bun scripts/build.ts --skip-web --target bun-windows-x64 | |
| bun scripts/build.ts --skip-web --target bun-windows-arm64 | |
| - name: Upload artifacts | |
| uses: actions/upload-artifact@v5 | |
| with: | |
| name: binaries-linux-windows | |
| path: dist/bin/ | |
| build-macos-x64: | |
| runs-on: macos-13 | |
| steps: | |
| - uses: actions/checkout@v5 | |
| - uses: oven-sh/setup-bun@v2 | |
| with: | |
| bun-version: latest | |
| - name: Install dependencies | |
| run: bun install --frozen-lockfile | |
| - name: Build native | |
| run: | | |
| bun scripts/build.ts | |
| mv dist/bin/openmantis dist/bin/openmantis-darwin-x64 | |
| - name: Codesign | |
| run: codesign --entitlements scripts/entitlements.plist --deep --force --sign - dist/bin/openmantis-darwin-x64 | |
| - name: Upload artifacts | |
| uses: actions/upload-artifact@v5 | |
| with: | |
| name: binaries-macos-x64 | |
| path: dist/bin/ | |
| build-macos-arm64: | |
| runs-on: macos-latest | |
| steps: | |
| - uses: actions/checkout@v5 | |
| - uses: oven-sh/setup-bun@v2 | |
| with: | |
| bun-version: latest | |
| - name: Install dependencies | |
| run: bun install --frozen-lockfile | |
| - name: Build native | |
| run: | | |
| bun scripts/build.ts | |
| mv dist/bin/openmantis dist/bin/openmantis-darwin-arm64 | |
| - name: Codesign | |
| run: codesign --force --sign - dist/bin/openmantis-darwin-arm64 | |
| - name: Upload artifacts | |
| uses: actions/upload-artifact@v5 | |
| with: | |
| name: binaries-macos-arm64 | |
| path: dist/bin/ | |
| release: | |
| needs: [build-linux-windows, build-macos-x64, build-macos-arm64] | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/download-artifact@v5 | |
| with: | |
| name: binaries-linux-windows | |
| path: dist/bin/ | |
| - uses: actions/download-artifact@v5 | |
| with: | |
| name: binaries-macos-x64 | |
| path: dist/bin/ | |
| - uses: actions/download-artifact@v5 | |
| with: | |
| name: binaries-macos-arm64 | |
| path: dist/bin/ | |
| - name: Create GitHub Release | |
| uses: softprops/action-gh-release@v2 | |
| env: | |
| FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true | |
| with: | |
| generate_release_notes: true | |
| body: | | |
| ## Installation | |
| Download the binary for your platform, then: | |
| ```bash | |
| chmod +x openmantis-* | |
| ./openmantis-* init | |
| ./openmantis-* start | |
| ``` | |
| files: | | |
| dist/bin/openmantis-linux-x64 | |
| dist/bin/openmantis-linux-arm64 | |
| dist/bin/openmantis-darwin-x64 | |
| dist/bin/openmantis-darwin-arm64 | |
| dist/bin/openmantis-windows-x64.exe | |
| dist/bin/openmantis-windows-arm64.exe |