-
Notifications
You must be signed in to change notification settings - Fork 1.4k
51 lines (41 loc) · 1.44 KB
/
unsafe_build_and_test_debug.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
# github secrets are withheld by default on pull_request triggers
# to avoid attackers from making PR attacks
# however, to test the iOS build, we need these secrets and
# are currently protecting them by using a deployment environment
# that requires a maintainer to approve the job run.
# thus, we can safely use `pull_request_target` to expose the secrets.
# NOTE: EVERY JOB IN THIS FILE must be protected by a deployment environment as well.
name: UNSAFE! Build and Test
concurrency:
group: ${{ github.head_ref || github.ref }}
cancel-in-progress: true
on:
pull_request_target:
types:
- opened
- synchronize
jobs:
ios-debug-build:
name: iOS Debug Build
runs-on: macos-11
timeout-minutes: 10
environment: Client iOS Debug
env:
MATCH_PASSWORD: ${{ secrets.IOS_MATCH_PASSWORD }}
MATCH_GIT_BASIC_AUTHORIZATION: ${{ secrets.IOS_MATCH_GIT_BASIC_AUTHORIZATION }}
steps:
- name: Checkout
uses: actions/[email protected]
with:
ref: ${{ github.event.pull_request.head.sha }}
- name: Install Node
uses: actions/[email protected]
with:
node-version: 16
cache: npm
- name: Install NPM Dependencies
run: npm ci
- name: Set XCode Version
run: sudo xcode-select -switch /Applications/Xcode_13.2.app
- name: Build iOS Client
run: npm run action apple/scripts/ios_package_remote -- --buildMode=debug