30 lines
1.6 KiB
TypeScript
30 lines
1.6 KiB
TypeScript
import { readFileSync } from 'node:fs'
|
|
import { resolve } from 'node:path'
|
|
import yaml from 'js-yaml'
|
|
import { expect, it } from 'vitest'
|
|
|
|
const workflow = yaml.load(readFileSync(resolve(import.meta.dirname, '../.github/workflows/macos-package.yml'), 'utf8')) as {
|
|
on: Record<string, unknown>
|
|
permissions: Record<string, string>
|
|
concurrency: { group: string; 'cancel-in-progress': boolean }
|
|
jobs: Record<string, {
|
|
'runs-on': string[]
|
|
steps: Array<{ id?: string; name?: string; if?: string; uses?: string; run?: string; with?: Record<string, unknown> }>
|
|
}>
|
|
}
|
|
|
|
it('confines signed Mac packaging to manual dispatch and a dedicated Apple Silicon runner', () => {
|
|
expect(Object.keys(workflow.on)).toEqual(['workflow_dispatch'])
|
|
expect(workflow.permissions).toEqual({ contents: 'read' })
|
|
expect(workflow.concurrency).toEqual({ group: 'macos-desktop-package', 'cancel-in-progress': false })
|
|
expect(workflow.jobs.package!['runs-on']).toEqual(['self-hosted', 'macOS', 'ARM64', 'dsh-mac-package-trial'])
|
|
const steps = workflow.jobs.package!.steps
|
|
expect(steps.find(step => step.id === 'checkout')?.with).toMatchObject({ 'persist-credentials': false, clean: true })
|
|
for (const step of steps) expect(step.run ?? '').not.toContain('${{ inputs.')
|
|
const uploads = steps.filter(step => step.uses?.startsWith('actions/upload-artifact@'))
|
|
expect(uploads).toHaveLength(2)
|
|
expect(uploads[0]?.if).toBe("always() && steps.checkout.outcome == 'success'")
|
|
expect(uploads[1]?.if).toBe('success()')
|
|
expect(uploads[1]?.with?.path).toBe('apps/desktop/.desktop-build/targets/mac-arm64/artifacts/*.dmg\napps/desktop/.desktop-build/targets/mac-arm64/artifacts/*.zip\n')
|
|
})
|