Certify ame win frontend (#203)

* WIP sign windows electron application for ame

* Testing on pr level

* Remove sh husky step for windows to sign application

* Update Jenkinsfile

* Add certify sign to release workflow

Author: michelu89

.github/workflows/tagged_release.yml

@@ -201,6 +201,58 @@ jobs:
           script-file: win-installer/installer.nsi
           arguments: "-V3 -DVERSION=${{ github.event.inputs.release_version }}"
 
+      - name: Upload binary (Windows)
+        if: matrix.os == 'windows-latest'
+        uses: actions/upload-artifact@v4
+        with:
+          name: aspect-model-editor-v${{ github.event.inputs.release_version }}-win
+          path: win-installer/aspect-model-editor-v${{ github.event.inputs.release_version }}-win.exe
+
+      # Sign Windows executable
+      - name: Get Artifact ID (Windows)
+        if: matrix.os == 'windows-latest'
+        shell: bash
+        run: |
+          # Get the list of artifacts for the specified workflow run
+          response=$(curl -H "Authorization: Bearer $TOKEN" -H "Accept: application/vnd.github+json" "https://api.github.com/repos/${{ github.repository_owner }}/$(echo '${{ github.repository }}' | cut -d'/' -f2)/actions/runs/${{ github.run_id }}/artifacts")
+
+          # Filter out the ID of the artifact with a name that contains "windows"
+          artifact_id=$(echo "$response" | jq -r '.artifacts[] | select(.name | contains("win")) | .id')
+
+          # Save the artifact ID in an environment variable
+          echo "ARTIFACT_ID=$artifact_id" >> $GITHUB_ENV
+        env:
+          TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Commit Artifact url and version changes and push to pre release branch for jenkins (Windows)
+        if: matrix.os == 'windows-latest'
+        shell: bash
+        run: |
+          ARTIFACT_URL_WIN="https://api.github.com/repos/eclipse-esmf/esmf-aspect-model-editor/actions/artifacts/$ARTIFACT_ID/zip"
+          BRANCH_NAME="pre_release_configuration"
+
+          echo "artifact_url_win=$ARTIFACT_URL_WIN" > parameters.txt
+          echo "version=${{ github.event.inputs.release_version }}" >> parameters.txt
+
+          git config --global user.email "[email protected]"
+          git config --global user.name "github-actions"
+          git checkout -b $BRANCH_NAME
+          git add parameters.txt
+          git commit -m "Add parameters.txt with artifact_url_win and version"
+          git push origin $BRANCH_NAME
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Trigger Jenkins Job, for signing executable
+        if: matrix.os == 'windows-latest'
+        shell: bash
+        run: |
+          DATA='{"repository": {"url": "https://github.com/eclipse-esmf/esmf-aspect-model-editor", "html_url": "https://github.com/eclipse-esmf/esmf-aspect-model-editor", "owner": { "name": "ESMF"}}, "pusher": { "name": "GitHub Action", "email": "[email protected]"}}'
+          SHA1="$(echo -n "${DATA}" | openssl dgst -sha1 -hmac "${WEBHOOK_SECRET}" | sed 's/SHA1(stdin)= //')"
+          curl -X POST https://ci.eclipse.org/esmf/github-webhook/ -H "Content-Type: application/json" -H "X-GitHub-Event: push" -H "X-Hub-Signature: sha1=${SHA1}" -d "${DATA}"
+
+
+      # Release Mac and Linux executables
       - name: Create GitHub release (Mac)
         if: ${{ (matrix.os == 'macos-12') && (!contains( github.ref, '-rc' )) }}
         uses: svenstaro/upload-release-action@latest
@@ -240,23 +292,3 @@ jobs:
           repo_token: ${{ secrets.GITHUB_TOKEN }}
           file: core/electron/aspect-model-editor-v${{ github.event.inputs.release_version }}-linux-glibc-v${{ env.GLIBC_VERSION }}.tar.gz
           tag: v${{ github.event.inputs.release_version }}
-
-      - name: Create GitHub release (Windows)
-        if: ${{ (matrix.os == 'windows-latest') && (!contains( github.ref, '-rc' )) }}
-        uses: svenstaro/upload-release-action@latest
-        with:
-          overwrite: true
-          prerelease: false
-          repo_token: ${{ secrets.GITHUB_TOKEN }}
-          file: win-installer/aspect-model-editor-v${{ github.event.inputs.release_version }}-win.exe
-          tag: v${{ github.event.inputs.release_version }}
-
-      - name: Create GitHub pre-release (Windows)
-        if: ${{ (matrix.os == 'windows-latest') && (contains( github.ref, '-rc' )) }}
-        uses: svenstaro/upload-release-action@latest
-        with:
-          overwrite: true
-          prerelease: true
-          repo_token: ${{ secrets.GITHUB_TOKEN }}
-          file: win-installer/aspect-model-editor-v${{ github.event.inputs.release_version }}-win.exe
-          tag: v${{ github.event.inputs.release_version }}

.jenkins/Jenkinsfile

@@ -0,0 +1,114 @@
+pipeline {
+  agent any
+
+  environment {
+    GITHUB_BOT_TOKEN = credentials('github-bot-token')
+  }
+
+  stages {
+    stage('Read parameters file') {
+      steps {
+        script {
+          if (fileExists('parameters.txt')) {
+            // Read the file
+            def fileContent = readFile('parameters.txt').trim()
+
+            // Split the file content into lines
+            def lines = fileContent.split("\n")
+
+            // Iterate over the lines and set the environment variables
+            lines.each { line ->
+              def parts = line.split('=')
+              if (parts.size() == 2) {
+                env[parts[0]] = parts[1]
+              }
+            }
+
+            echo "Artifact URL: ${env.artifact_url_win}"
+            echo "Version: ${env.version}"
+          } else {
+            echo "Error: parameters.txt does not exist."
+          }
+        }
+      }
+    }
+
+    stage('Download and unpack artifact') {
+      steps {
+        script {
+          sh "curl -L -H 'Accept: application/vnd.github.v3+json' \
+                        -H 'Authorization: Bearer ${GITHUB_BOT_TOKEN}' \
+                        '${env.artifact_url_win}' \
+                        --output 'aspect-model-editor-v${env.version}-win.zip'"
+          sh "mkdir -p unpack_dir"
+          sh "unzip -o aspect-model-editor-v${env.version}-win.zip -d unpack_dir"
+          sh "ls -a unpack_dir"
+        }
+      }
+    }
+
+    stage('Sign Applications') {
+      steps {
+        script {
+          sh "mkdir -p signed_dir"
+          sh "curl -o signed_dir/aspect-model-editor-v${env.version}-win.exe -F file=@unpack_dir/aspect-model-editor-v${env.version}-win.exe https://cbi.eclipse.org/authenticode/sign"
+          sh "zip -r aspect-model-editor-v${env.version}-win-signed.zip signed_dir"
+        }
+      }
+    }
+
+    stage('Release signed WINDOWS artifact to GitHub Releases') {
+      steps {
+        script {
+          def repo = "eclipse-esmf/esmf-aspect-model-editor"
+          def tagName = "v${env.version}"
+          def fileName = "aspect-model-editor-v${env.version}-win-signed.zip"
+          def releaseId = ""
+
+          def tagExists = sh(script: """
+                        curl -s -L \\
+                             -H "Accept: application/vnd.github+json" \\
+                             -H "Authorization: Bearer \$GITHUB_BOT_TOKEN" \\
+                             https://api.github.com/repos/${repo}/git/refs/tags/${tagName} | jq -r '.ref'
+                    """, returnStdout: true).trim()
+
+          if (tagExists == "null") {
+            // Tag does not exist, create a new one
+            releaseId = sh(script: """
+                            curl -s -L \\
+                                 -H "Accept: application/vnd.github+json" \\
+                                 -H "Authorization: Bearer \$GITHUB_BOT_TOKEN" \\
+                                 -X POST \\
+                                 -d '{ "tag_name": "${tagName}", "name": "${tagName}", "body": "Release ${tagName}" }' \\
+                                 https://api.github.com/repos/${repo}/releases | jq -r '.id'
+                        """, returnStdout: true).trim()
+          } else {
+            // Tag exists, use the existing one
+            releaseId = sh(script: """
+                            curl -s -L \\
+                                 -H "Accept: application/vnd.github+json" \\
+                                 -H "Authorization: Bearer \$GITHUB_BOT_TOKEN" \\
+                                 https://api.github.com/repos/${repo}/releases/tags/${tagName} | jq -r '.id'
+                        """, returnStdout: true).trim()
+          }
+
+          sh """
+                    curl -L \
+                         -X POST \
+                         -H "Accept: application/vnd.github+json" \\
+                         -H "Authorization: Bearer \$GITHUB_BOT_TOKEN" \
+                         -H "Content-Type: application/octet-stream" \
+                         --data-binary @${fileName} \
+                         "https://uploads.github.com/repos/${repo}/releases/${releaseId}/assets?name=${fileName}"
+                    """
+
+          sh """
+                    curl -X DELETE \
+                         -H "Authorization: Bearer \$GITHUB_BOT_TOKEN" \
+                         "https://api.github.com/repos/eclipse-esmf/esmf-aspect-model-editor/git/refs/heads/pre_release_configuration"
+                    """
+        }
+      }
+    }
+  }
+}

core/.husky/pre-commit

@@ -2,7 +2,7 @@
 . "$(dirname -- "$0")/_/husky.sh"
 
 cd core
-npm run format:all -- --uncommited && npm run affected:lint -- --uncommited --parallel
+npm run format:all -- --uncommited
 
 if [ -n "$(git status --porcelain)" ]; then
   git add .

core/apps/ame-e2e/src/fixtures/valid-documentation.html

@@ -11,7 +11,7 @@
   ~ SPDX-License-Identifier: MPL-2.0
   -->
 
-<!doctype html>
+<!DOCTYPE html>
 <html lang="en">
   <head>
     <title>Test Documentation</title>

core/apps/ame-e2e/src/integration/drag-and-drop/different-namespace/external-characteristic-reference.cy.ts

@@ -39,7 +39,7 @@ describe('Test drag and drop ext characteristic', () => {
       },
       {
         fixture: `/external-reference/different-namespace/without-childrens/${fileName}`,
-      },
+      }
     );
 
     cy.visitDefault().then(() =>
@@ -61,7 +61,7 @@ describe('Test drag and drop ext characteristic', () => {
           expect(rdf).to.contain(':property1 a samm:Property');
           expect(rdf).to.contain('samm:characteristic ext-different:ExternalCharacteristic');
           expect(rdf).not.contain(':ExternalCharacteristic a samm:Characteristic');
-        }),
+        })
     );
   });
 });

core/apps/ame-e2e/src/integration/drag-and-drop/different-namespace/external-constraint-reference.cy.ts

@@ -41,7 +41,7 @@ describe('Test drag and drop ext constraint', () => {
       },
       {
         fixture: `/external-reference/different-namespace/without-childrens/${fileName}`,
-      },
+      }
     );
 
     cy.visitDefault().then(() =>
@@ -71,7 +71,7 @@ describe('Test drag and drop ext constraint', () => {
           expect(rdf).to.contain(':Characteristic1 a samm:Characteristic');
           expect(rdf).to.contain('samm-c:constraint ext-different:ExternalConstraint');
           expect(rdf).not.contain(':ExternalConstraint a samm:Constraint');
-        }),
+        })
     );
   });
 });

core/apps/ame-e2e/src/integration/drag-and-drop/different-namespace/external-entity-reference.cy.ts

@@ -38,7 +38,7 @@ describe('Test drag and drop', () => {
       },
       {
         fixture: `/external-reference/different-namespace/without-childrens/${fileName}`,
-      },
+      }
     );
 
     cy.visitDefault().then(() =>
@@ -64,7 +64,7 @@ describe('Test drag and drop', () => {
           expect(rdf).to.contain('samm:dataType ext-different:ExternalEntity');
 
           expect(rdf).not.contain(':ExternalEntity a samm:Entity');
-        }),
+        })
     );
   });
 });

core/apps/ame-e2e/src/integration/drag-and-drop/different-namespace/external-property-reference-with-children.cy.ts

@@ -38,7 +38,7 @@ describe('Test drag and drop ext properties', () => {
       },
       {
         fixture: `/external-reference/different-namespace/with-childrens/${fileName}`,
-      },
+      }
     );
 
     cy.visitDefault().then(() =>
@@ -69,7 +69,7 @@ describe('Test drag and drop ext properties', () => {
           expect(rdf).not.contain('samm:characteristic samm-c:Boolean');
           expect(rdf).not.contain(':ChildrenCharacteristic2 a samm:Characteristic');
           expect(rdf).not.contain(':ChildrenEntity2 a samm:Entity');
-        }),
+        })
     );
   });
 });

core/apps/ame-e2e/src/integration/drag-and-drop/different-namespace/external-property-reference.cy.ts

@@ -38,7 +38,7 @@ describe('Test drag and drop ext properties', () => {
       },
       {
         fixture: `/external-reference/different-namespace/without-childrens/${fileName}`,
-      },
+      }
     );
 
     cy.visitDefault().then(() =>
@@ -63,7 +63,7 @@ describe('Test drag and drop ext properties', () => {
           expect(rdf).to.contain(':Characteristic1 a samm:Characteristic');
 
           expect(rdf).not.contain(':externalProperty a samm:Property');
-        }),
+        })
     );
   });
 });

core/apps/ame-e2e/src/integration/drag-and-drop/new-elements.cy.ts

@@ -49,9 +49,7 @@ describe('Test drag and drop', () => {
 
       .then(() => cy.clickConnectShapes('AspectDefault', 'operation1'))
       .then(() =>
-        cyHelp
-          .hasAddInputAndOutputShapeOverlay('operation1')
-          .then(hasInputAndOutputOverlay => expect(hasInputAndOutputOverlay).equal(true)),
+        cyHelp.hasAddInputAndOutputShapeOverlay('operation1').then(hasInputAndOutputOverlay => expect(hasInputAndOutputOverlay).equal(true))
       )
 
       .then(() => cy.clickConnectShapes('property2', 'Trait1'))
@@ -79,7 +77,7 @@ describe('Test drag and drop', () => {
           expect(aspect.properties[1].property.characteristic.name).to.equals('Trait1');
           expect(aspect.properties[1].property.characteristic.baseCharacteristic.name).to.equals('Characteristic1');
           expect(aspect.properties[1].property.characteristic.baseCharacteristic.dataType.name).to.equals('Entity1');
-        }),
+        })
       );
   });
 });