ci: set installer cert & password

Author: ethanndickson

.github/workflows/release.yml

@@ -3,7 +3,7 @@ name: release
 on:
   push:
     branches:
-      - main
+      - '*'
   release:
     types: [published]
 
@@ -42,6 +42,8 @@ jobs:
       - name: Build
         env:
           APPLE_CERT: ${{ secrets.APPLE_DEVELOPER_ID_PKCS12_B64 }}
+          APPLE_INSTALLER_CERT: ${{ secrets.APPLE_INSTALLER_PKCS12_B64 }}
+          INSTALLER_CERT_PASSWORD: ${{ secrets.APPLE_INSTALLER_PKCS12_PASSWORD }}
           APPLE_ID: ${{ secrets.APPLE_NOTARYTOOL_USERNAME  }}
           APPLE_ID_PASSWORD: ${{ secrets.APPLE_NOTARYTOOL_PASSWORD }}
           APP_PROF: ${{ secrets.CODER_DESKTOP_APP_PROVISIONPROFILE_B64 }}
@@ -55,30 +57,30 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           RELEASE_TAG: ${{ github.event_name == 'release' && github.event.release.tag_name || 'preview' }}
 
-  update-cask:
-    name: Update homebrew-coder cask
-    runs-on: ${{ github.repository_owner == 'coder' && 'depot-macos-latest' || 'macos-latest'}}
-    if: ${{ github.repository_owner == 'coder' }}
-    needs: build
-    steps:
-      - name: Checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-        with:
-          fetch-depth: 0
-          fetch-tags: true
-          persist-credentials: false
+  # update-cask:
+  #   name: Update homebrew-coder cask
+  #   runs-on: ${{ github.repository_owner == 'coder' && 'depot-macos-latest' || 'macos-latest'}}
+  #   if: ${{ github.repository_owner == 'coder' }}
+  #   needs: build
+  #   steps:
+  #     - name: Checkout
+  #       uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+  #       with:
+  #         fetch-depth: 0
+  #         fetch-tags: true
+  #         persist-credentials: false
 
-      - name: Setup Nix
-        uses: ./.github/actions/nix-devshell
+  #     - name: Setup Nix
+  #       uses: ./.github/actions/nix-devshell
 
-      - name: Update homebrew-coder
-        env:
-          GH_TOKEN: ${{ secrets.CODERCI_GITHUB_TOKEN }}
-          RELEASE_TAG: ${{ github.event_name == 'release' && github.event.release.tag_name || 'preview' }}
-          ASSIGNEE: ${{ github.actor }}
-        run: |
-          git config --global user.email "[email protected]"
-          git config --global user.name "Coder CI"
-          gh auth setup-git
+  #     - name: Update homebrew-coder
+  #       env:
+  #         GH_TOKEN: ${{ secrets.CODERCI_GITHUB_TOKEN }}
+  #         RELEASE_TAG: ${{ github.event_name == 'release' && github.event.release.tag_name || 'preview' }}
+  #         ASSIGNEE: ${{ github.actor }}
+  #       run: |
+  #         git config --global user.email "[email protected]"
+  #         git config --global user.name "Coder CI"
+  #         gh auth setup-git
 
-          ./scripts/update-cask.sh --version "$RELEASE_TAG" --assignee "$ASSIGNEE"
+  #         ./scripts/update-cask.sh --version "$RELEASE_TAG" --assignee "$ASSIGNEE"