From 3aede1a23e18a69026630bf12c61ad75702b4626 Mon Sep 17 00:00:00 2001
From: Maurice Parker <mo@vincode.io>
Date: Tue, 8 Oct 2019 17:18:13 -0500
Subject: [PATCH] Add Github Actions configuation

---
 .github/workflows/build.yml  |  23 +++++++++++++++++++++++
 buildscripts/certs/apple.cer | Bin 0 -> 1062 bytes
 buildscripts/ci-build.sh     |  20 ++++++++++++++++++++
 3 files changed, 43 insertions(+)
 create mode 100644 .github/workflows/build.yml
 create mode 100644 buildscripts/certs/apple.cer
 create mode 100755 buildscripts/ci-build.sh

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
new file mode 100644
index 000000000..359a6adf9
--- /dev/null
+++ b/.github/workflows/build.yml
@@ -0,0 +1,23 @@
+name: CI
+
+on: [push]
+
+jobs:
+  build:
+
+    runs-on: macOS-latest
+    
+    steps:
+    - name: Checkout Project
+      uses: actions/checkout@v1
+      with: 
+        submodules: recursive
+
+    - name: Switch to Xcode 11
+      run: sudo xcode-select -s /Applications/Xcode_11.app
+    
+    - name: Run Build
+      env:
+          ENCRYPTION_SECRET: ${{ secrets.ENCRYPTION_SECRET }}
+          KEY_SECRET: ${{ secrets.KEY_SECRET }}
+      run: buildscripts/ci-build.sh
\ No newline at end of file
diff --git a/buildscripts/certs/apple.cer b/buildscripts/certs/apple.cer
new file mode 100644
index 0000000000000000000000000000000000000000..d2bb1da64122c864c872d9b711b176d042462748
GIT binary patch
literal 1062
zcmXqLVo@?^V&+=F%*4pV#KCxP&k@Vq1p)@VY@Awc9&O)w85vnw84QvPxeYkkm_u3E
zgqcEv4TTK^K^!h&F2{m`oKywRyktE?H3JopAh)nAM9?|4s3bEjGdZy&Ge1wkv9u&3
zzbLb$(ooDm1f-5xm=~fhC_leM!P(J3PMp`!*ucoZ+{n<x!o)mEoYx4MYtT3iyCZmz
z9id~O1$G3FGQ{xk{Gyzc^30S}1((#a)SUc+)FOqT)EuyziVa;1oWM@uu_i*b0uB!u
zG%+e6hZiF&19KB2KLb#li>Zl`k>Qj@$g<O6t4^p`dc5p;_a=Tvz1qY*Cc#zbYLXig
z%TwZ(vMX=1{1>1r8WvHYTX!VypjWG%{)c-lQVYXRuCJE(pY=;r$WxR<a?PsST1IcD
zC1(VQ+V*t4*`F;j^#Su5#@gwu>F4-br<!NI<=nO|{cK>${9`c}_k`!An>Li0EopDe
zv*^E}E$UaTdLwGTU-QA<OOvlk6>d$KGuPNJ^ruh+PumVL-h)reU3&vOc4_NAnbP|3
z#gVzkGL~*w{3pGxU>8%Qce&F<%bj1(KJ<Biz}ll{*;B>Xzgbzkmy4MuTza<lvzzA0
z7l*rFRvySoOc&ks;qTLoJxTF-=V#u1FP;2vQtE0ZW=00a#f{4h8W$VL0>fLDk420{
zq(fbtbLBRPgzh)5cYSk@JQ@_Tc)I~VNLrYY@jnZz0W**?kOv7Uvq%_-HHc_m$aJ4l
z#`*6{cCVhpvhVJ`^&D{qdLRYzEb0cT2FeQ*7s$8CW|Wi^Sn2C07v<<Bf>Nhma(=FU
z5ipVI0fh|sK<fEHHn0Gbe4Bv)8y7gCC#SG6F|sfL(>iL>2Sz0$ga7&Wk^6MMZpzW`
ze<$2-^n%rNMP7I9$xNP|H^ujq>s(2H^mkUSRb<TlX2!jn)@dacZCro$u&Y7;;%44+
zvhG_xPVQP<GJDD48Aa{ZcI#caCxz@Z+C4!cIGf8)VB1aEfE>jJu1>%3p6qBF+hu?6
zedkq{<@Qo*x8F5!lFt%JA<5kEuT>H4)frt++IqZRKk^h=we)T%!^(BLy$#kqT(EJE
zX2Ubi@~8Vu7BQZxzw?Oene~p{Z+0b3{mh!|*mRcPTGnUklH03)o}Bv9|B3H&wV91C
z_x#+Vd5N(q?V(=JH^r`_KPnzJuG@ck!rYZ>Kd=95AvG=CKqhc$%$vflrY$-AJfiXd
D2`7-6

literal 0
HcmV?d00001

diff --git a/buildscripts/ci-build.sh b/buildscripts/ci-build.sh
new file mode 100755
index 000000000..5f44bd72c
--- /dev/null
+++ b/buildscripts/ci-build.sh
@@ -0,0 +1,20 @@
+#!/bin/sh
+set -v
+set -e
+
+openssl aes-256-cbc -k "$ENCRYPTION_SECRET" -in buildscripts/certs/dev.cer.enc -d -a -out buildscripts/certs/dev.cer
+openssl aes-256-cbc -k "$ENCRYPTION_SECRET" -in buildscripts/certs/dev.p12.enc -d -a -out buildscripts/certs/dev.p12
+
+security create-keychain -p github-actions github-build.keychain
+security import buildscripts/certs/apple.cer -k ~/Library/Keychains/github-build.keychain -A
+security import buildscripts/certs/dev.cer -k ~/Library/Keychains/github-build.keychain -A
+security import buildscripts/certs/dev.p12 -k ~/Library/Keychains/github-build.keychain -P $KEY_SECRET -A
+security set-key-partition-list -S apple-tool:,apple: -s -k github-actions github-build.keychain
+security default-keychain -s github-build.keychain
+
+rm -f ./buildscripts/certs/dev.cer
+rm -f ./buildscripts/certs/dev.p12
+
+xcodebuild -scheme 'NetNewsWire' -configuration Release -allowProvisioningUpdates -showBuildTimingSummary
+
+security delete-keychain github-build.keychain
\ No newline at end of file