Build-and-deploy-win.yml

name: Build-and-deploy-win
run-name: ${{ github.actor }} is building a Windows release for SODA beta

on:
  push:
    branches:
      - main
      - staging
      - pre-staging
      - azure-trusted-signing

jobs:
  deploy-on-windows:
    runs-on: windows-latest

    defaults:
      run:
        shell: bash -l {0}

    steps:
      - uses: actions/checkout@v3

      - uses: actions/setup-python@v4
        with:
          python-version: 3.9

      - uses: conda-incubator/setup-miniconda@v2
        with:
          miniconda-version: "latest"
          activate-environment: env-electron-python
          environment-file: tools/anaconda-env/environment-Windows.yml
          auto-update-conda: true
          auto-activate-base: false
      - run: |
          conda activate  env-electron-python
          conda info
          conda list

      - uses: actions/setup-node@v4
        with:
          node-version: "lts/hydrogen"

      - name: Install package.json modules and their dependencies
        run: npm install --ignore-scripts

      - name: Sign files with Trusted Signing V1.1
        uses: azure/trusted-signing-action@v0.5.1
        with:
          azure-tenant-id: ${{ secrets.AZURE_TENANT_ID }}
          azure-client-id: ${{ secrets.AZURE_CLIENT_ID }}
          azure-client-secret: ${{ secrets.AZURE_CLIENT_SECRET }}
          endpoint: https://eus.codesigning.azure.net/
          trusted-signing-account-name: fdih-signing-account
          certificate-profile-name: california-medical-innovations-institute
          files: ${{ github.workspace }}\src\main\analytics.js
          file-digest: SHA256
          timestamp-rfc3161: http://timestamp.acs.microsoft.com
          timestamp-digest: SHA256