retry

Author: ethanndickson

.github/workflows/release.yml

@@ -38,17 +38,22 @@ jobs:
       #   uses: ./.github/actions/nix-devshell
 
       - name: Install Cert & Retrieve Provisioning Profiles
+        env:
+          APPLE_CERT: ${{ secrets.APPLE_DEVELOPER_ID_PKCS12_B64 }}
+          APP_PROF: ${{ secrets.CODER_DESKTOP_APP_PROVISIONPROFILE_B64 }}
+          EXT_PROF: ${{ secrets.CODER_DESKTOP_EXTENSION_PROVISIONPROFILE_B64 }}
+          CERT_PASSWORD: ${{ secrets.APPLE_DEVELOPER_ID_PKCS12_PASSWORD }}
         run: |
-          set -euxo pipefail
-          echo -n "${{ secrets.APPLE_DEVELOPER_ID_PKCS12_B64 }}" | base64 -d -o "$CERT_PATH"
+          set -euo pipefail
+          echo -n "$APPLE_CERT" | base64 -d -o "$CERT_PATH"
           security create-keychain -p "" "$KEYCHAIN_PATH"
           security set-keychain-settings -lut 21600 "$KEYCHAIN_PATH"
           security unlock-keychain -p "" "$KEYCHAIN_PATH"
-          security import "$CERT_PATH" -P "${{ secrets.APPLE_DEVELOPER_ID_PKCS12_PASSWORD }}" -A -t cert -f pkcs12 -k "$KEYCHAIN_PATH"
+          security import "$CERT_PATH" -P "CERT_PASSWORD" -A -t cert -f pkcs12 -k "$KEYCHAIN_PATH"
           security list-keychain -d user -s "$KEYCHAIN_PATH"
 
-          echo -n "${{ secrets.CODER_DESKTOP_APP_PROVISIONPROFILE_B64 }}" | base64 -d -o "$APP_PROF_PATH"
-          echo -n "${{ secrets.CODER_DESKTOP_EXTENSION_PROVISIONPROFILE_B64 }}" | base64 -d -o "EXT_PROF_PATH"
+          echo -n "$EXT_PROF" | base64 -d -o "$APP_PROF_PATH"
+          echo -n "$APP_PROF" | base64 -d -o "EXT_PROF_PATH"
 
       - name: Build
         run: |