mirror of
https://github.com/MODSetter/SurfSense.git
synced 2026-08-27 17:52:41 +00:00
360b5f8e3a
Some checks are pending
Build and Push Docker Images / tag_release (push) Waiting to run
Build and Push Docker Images / build (./surfsense_backend, ./surfsense_backend/Dockerfile, backend, surfsense-backend, ubuntu-24.04-arm, linux/arm64, arm64) (push) Blocked by required conditions
Build and Push Docker Images / build (./surfsense_backend, ./surfsense_backend/Dockerfile, backend, surfsense-backend, ubuntu-latest, linux/amd64, amd64) (push) Blocked by required conditions
Build and Push Docker Images / build (./surfsense_web, ./surfsense_web/Dockerfile, web, surfsense-web, ubuntu-24.04-arm, linux/arm64, arm64) (push) Blocked by required conditions
Build and Push Docker Images / build (./surfsense_web, ./surfsense_web/Dockerfile, web, surfsense-web, ubuntu-latest, linux/amd64, amd64) (push) Blocked by required conditions
Build and Push Docker Images / create_manifest (backend, surfsense-backend) (push) Blocked by required conditions
Build and Push Docker Images / create_manifest (web, surfsense-web) (push) Blocked by required conditions
60 lines
2.2 KiB
YAML
60 lines
2.2 KiB
YAML
name: Notary status check
|
|
|
|
# One-off diagnostic workflow. Queries Apple's notary service to see if your
|
|
# submissions are queued, in progress, accepted, or rejected. Useful when a
|
|
# notarization seems "hung" — most often the queue itself, especially on a
|
|
# brand-new Apple Developer account.
|
|
#
|
|
# Run via: Actions tab -> "Notary status check" -> Run workflow.
|
|
# Inputs are optional; if you provide a submission ID, it also fetches that
|
|
# submission's full Apple log.
|
|
#
|
|
# Safe to delete after diagnosis.
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
submission_id:
|
|
description: 'Optional: submission UUID to fetch full Apple log for'
|
|
required: false
|
|
default: ''
|
|
|
|
jobs:
|
|
status:
|
|
runs-on: macos-latest
|
|
steps:
|
|
- name: List recent notarization submissions
|
|
env:
|
|
APPLE_ID: ${{ secrets.APPLE_ID }}
|
|
APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }}
|
|
APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
|
|
run: |
|
|
set -euo pipefail
|
|
echo "::group::Submission history (most recent first)"
|
|
xcrun notarytool history \
|
|
--apple-id "$APPLE_ID" \
|
|
--password "$APPLE_APP_SPECIFIC_PASSWORD" \
|
|
--team-id "$APPLE_TEAM_ID"
|
|
echo "::endgroup::"
|
|
|
|
- name: Inspect specific submission (if id provided)
|
|
if: ${{ inputs.submission_id != '' }}
|
|
env:
|
|
APPLE_ID: ${{ secrets.APPLE_ID }}
|
|
APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }}
|
|
APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
|
|
SUBMISSION_ID: ${{ inputs.submission_id }}
|
|
run: |
|
|
set -euo pipefail
|
|
echo "::group::Submission info"
|
|
xcrun notarytool info "$SUBMISSION_ID" \
|
|
--apple-id "$APPLE_ID" \
|
|
--password "$APPLE_APP_SPECIFIC_PASSWORD" \
|
|
--team-id "$APPLE_TEAM_ID"
|
|
echo "::endgroup::"
|
|
echo "::group::Apple's processing log for this submission"
|
|
xcrun notarytool log "$SUBMISSION_ID" \
|
|
--apple-id "$APPLE_ID" \
|
|
--password "$APPLE_APP_SPECIFIC_PASSWORD" \
|
|
--team-id "$APPLE_TEAM_ID" || true
|
|
echo "::endgroup::"
|