Add CI (#6)

.github/workflows/ci.yml

@@ -0,0 +1,126 @@
+name: CI
+
+defaults:
+  run:
+    shell: pwsh
+
+on:
+  push:
+    branches: [ main ]
+
+  pull_request:
+    branches: [ main ]
+
+  release:
+    types: [ published ]
+
+jobs:
+  Build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v3
+
+      - name: .NET Build
+        run: dotnet build --configuration Release
+
+      - name: Create module
+        run: |
+          New-Item module -ItemType Directory
+          $settings = Import-PowerShellDataFile ./BuildSettings.psd1
+          Copy-Item @settings
+
+      - name: Upload module
+        uses: actions/upload-artifact@v3
+        with:
+          name: module
+          path: ./module/
+
+  Test:
+    needs: Build
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v3
+
+      - name: Download module
+        uses: actions/download-artifact@v3
+        with:
+          name: module
+          path: ~/.local/share/powershell/Modules/AnyPackage.Apt
+
+      - name: Install AnyPackage module
+        run: Install-Module AnyPackage -Force -AllowClobber
+
+      - name: Test with Pester
+        run: |
+          $ht = Import-PowerShellDataFile PesterSettings.psd1
+          $config = New-PesterConfiguration $ht
+          Invoke-Pester -Configuration $config
+
+  Sign:
+    needs: Test
+    if: github.event_name == 'release' && github.event.action == 'published'
+    runs-on: windows-latest
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v3
+
+      - name: Download module
+        uses: actions/download-artifact@v3
+        with:
+          name: module
+          path: module
+
+      - name: Import certificate
+        env:
+          CERTIFICATE_BASE64: ${{ secrets.CERTIFICATE_BASE64 }}
+          CERTIFICATE_PASSWORD: ${{ secrets.CERTIFICATE_PASSWORD }}
+          CERTIFICATE_PASSWORD_KEY_BASE64: ${{ secrets.CERTIFICATE_PASSWORD_KEY_BASE64 }}
+        run: |
+          [convert]::FromBase64String($env:CERTIFICATE_BASE64) | Set-Content -Path cert.pfx -AsByteStream
+          $key = [convert]::FromBase64String($env:CERTIFICATE_PASSWORD_KEY_BASE64)
+          $password = ConvertTo-SecureString $env:CERTIFICATE_PASSWORD -Key $key
+          Import-PfxCertificate cert.pfx -Password $password -CertStoreLocation Cert:\CurrentUser\My
+
+      - name: Sign files
+        run: |
+          $config = Import-PowerShellDataFile SignSettings.psd1
+          $config['Certificate'] = Get-ChildItem Cert:\CurrentUser\My -CodeSigningCert
+          Set-Location .\module
+          Set-AuthenticodeSignature @config
+
+      - name: Create and sign catalog file
+        run: |
+          $config = Import-PowerShellDataFile SignSettings.psd1
+          $config['FilePath'] = 'AnyPackage.Apt.cat'
+          $config['Certificate'] = Get-ChildItem Cert:\CurrentUser\My -CodeSigningCert
+          Set-Location .\module
+          New-FileCatalog $config['FilePath'] -CatalogVersion 2
+          Set-AuthenticodeSignature @config
+
+      - name: Upload module
+        uses: actions/upload-artifact@v3
+        with:
+          name: module-signed
+          path: ./module/
+
+  Publish:
+    needs: Sign
+    if: github.event_name == 'release' && github.event.action == 'published'
+    runs-on: ubuntu-latest
+    steps:
+
+      - name: Download module
+        uses: actions/download-artifact@v3
+        with:
+          name: module-signed
+          path: '~/.local/share/powershell/Modules/AnyPackage.Apt'
+
+      - name: Install AnyPackage module
+        run: Install-Module AnyPackage -Force -AllowClobber
+
+      - name: Publish Module
+        env:
+          NUGET_KEY: ${{ secrets.NUGET_KEY }}
+        run: Publish-Module -Name AnyPackage.Apt -NuGetApiKey $env:NUGET_KEY

BuildSettings.psd1

@@ -0,0 +1,7 @@
+@{
+    Path = @(
+        './src/code/bin/Release/net6.0/AnyPackage.Provider.Apt.dll',
+        './src/AnyPackage.Apt.psd1'
+    )
+    Destination = './module'
+}

PesterSettings.psd1

@@ -0,0 +1,8 @@
+@{
+    Run    = @{
+        Exit = $true
+    }
+    Output = @{
+        Verbosity = 'Detailed'
+    }
+}

SignSettings.psd1

@@ -0,0 +1,5 @@
+@{
+    FilePath = @('AnyPackage.Apt.psd1', 'AnyPackage.Provider.Apt.dll')
+    TimeStampServer = 'http://timestamp.sectigo.com'
+    HashAlgorithm = 'SHA256'
+}