Add workflow and jenkins file to certify mac application (#211)

* Add workflow and jenkins file to certify mac application

Author: michelu89

.github/workflows/tagged_release.yml

@@ -8,7 +8,7 @@ on:
         required: true
 
 jobs:
-  gh_tagged_release:
+  build:
     name: Create tagged release
     runs-on: ${{ matrix.os }}
     strategy:
@@ -85,22 +85,24 @@ jobs:
           if [[ ${ASSET_ONE_URL} == *"-mac"* ]];
             then
               echo $ASSET_ONE_URL
-              DOWNLOAD_URL=$(curl -sl --header "Authorization: token ${{ secrets.GITHUB_TOKEN }}" https://api.github.com/repos/eclipse-esmf/esmf-aspect-model-editor-backend/releases/tags/v${{ github.event.inputs.release_version }} | jq -r '.assets[0].url')
+              DOWNLOAD_URL=$(curl -sl --header "Authorization: token ${{ secrets.GITHUB_TOKEN }}" https://api.github.com/repos/eclipse-esmf/esmf-aspect-model-editor-backend/releases/tags/v${{ github.event.inputs.release_version }} | jq -r '.assets[0].browser_download_url')
           fi
 
           if [[ ${ASSET_TWO_URL} == *"-mac"* ]];
             then
               echo $ASSET_TWO_URL
-              DOWNLOAD_URL=$(curl -sl --header "Authorization: token ${{ secrets.GITHUB_TOKEN }}" https://api.github.com/repos/eclipse-esmf/esmf-aspect-model-editor-backend/releases/tags/v${{ github.event.inputs.release_version }} | jq -r '.assets[1].url')
+              DOWNLOAD_URL=$(curl -sl --header "Authorization: token ${{ secrets.GITHUB_TOKEN }}" https://api.github.com/repos/eclipse-esmf/esmf-aspect-model-editor-backend/releases/tags/v${{ github.event.inputs.release_version }} | jq -r '.assets[1].browser_download_url')
           fi
 
           if [[ ${ASSET_THREE_URL} == *"-mac"* ]];
             then
               echo ASSET_THREE_URL
-              DOWNLOAD_URL=$(curl -sl --header "Authorization: token ${{ secrets.GITHUB_TOKEN }}" https://api.github.com/repos/eclipse-esmf/esmf-aspect-model-editor-backend/releases/tags/v${{ github.event.inputs.release_version }} | jq -r '.assets[2].url')
+              DOWNLOAD_URL=$(curl -sl --header "Authorization: token ${{ secrets.GITHUB_TOKEN }}" https://api.github.com/repos/eclipse-esmf/esmf-aspect-model-editor-backend/releases/tags/v${{ github.event.inputs.release_version }} | jq -r '.assets[2].browser_download_url')
           fi
 
-          curl -L -H "Authorization: token ${{ secrets.GITHUB_TOKEN }}" -H "Accept: application/octet-stream" $DOWNLOAD_URL > backend/ame-backend-${{ github.event.inputs.release_version }}-mac
+          curl -L -H "Authorization: token ${{ secrets.GITHUB_TOKEN }}" -H "Accept: application/octet-stream" $DOWNLOAD_URL > backend/ame-backend-${{ github.event.inputs.release_version }}-mac.zip
+          unzip backend/ame-backend-${{ github.event.inputs.release_version }}-mac.zip -d backend/
+          rm backend/ame-backend-${{ github.event.inputs.release_version }}-mac.zip
           chmod 755 backend/ame-backend-${{ github.event.inputs.release_version }}-mac
 
       - name: Download aspect model service into project (Linux)
@@ -208,87 +210,81 @@ jobs:
           name: aspect-model-editor-v${{ github.event.inputs.release_version }}-win
           path: win-installer/aspect-model-editor-v${{ github.event.inputs.release_version }}-win.exe
 
-      # Sign Windows executable
-      - name: Get Artifact ID (Windows)
-        if: matrix.os == 'windows-latest'
+      - name: Upload binary (Mac)
+        if: matrix.os == 'macos-12'
+        uses: actions/upload-artifact@v4
+        with:
+          name: aspect-model-editor-v${{ github.event.inputs.release_version }}-mac
+          path: core/electron/aspect-model-editor-v${{ github.event.inputs.release_version }}-mac.zip
+
+      # Release Linux executables
+      - name: Create GitHub release (Linux)
+        if: ${{ (matrix.os == 'ubuntu-20.04') && (!contains( github.ref, '-rc' )) }}
+        uses: svenstaro/upload-release-action@latest
+        with:
+          overwrite: true
+          prerelease: false
+          repo_token: ${{ secrets.GITHUB_TOKEN }}
+          file: core/electron/aspect-model-editor-v${{ github.event.inputs.release_version }}-linux-glibc-v${{ env.GLIBC_VERSION }}.tar.gz
+          tag: v${{ github.event.inputs.release_version }}
+
+      - name: Create GitHub pre-release (Linux)
+        if: ${{ (matrix.os == 'ubuntu-20.04') && (contains( github.ref, '-rc' )) }}
+        uses: svenstaro/upload-release-action@latest
+        with:
+          overwrite: true
+          prerelease: true
+          repo_token: ${{ secrets.GITHUB_TOKEN }}
+          file: core/electron/aspect-model-editor-v${{ github.event.inputs.release_version }}-linux-glibc-v${{ env.GLIBC_VERSION }}.tar.gz
+          tag: v${{ github.event.inputs.release_version }}
+
+  release:
+    needs: build
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout project
+        uses: actions/checkout@v3
+
+      # Sign (Windows & Mac) executable
+      - name: Get Artifact ID (Windows & Mac)
         shell: bash
         run: |
           # Get the list of artifacts for the specified workflow run
           response=$(curl -H "Authorization: Bearer $TOKEN" -H "Accept: application/vnd.github+json" "https://api.github.com/repos/${{ github.repository_owner }}/$(echo '${{ github.repository }}' | cut -d'/' -f2)/actions/runs/${{ github.run_id }}/artifacts")
 
-          # Filter out the ID of the artifact with a name that contains "windows"
-          artifact_id=$(echo "$response" | jq -r '.artifacts[] | select(.name | contains("win")) | .id')
+          # Filter out the ID of the artifacts
+          artifact_id_win=$(echo "$response" | jq -r '.artifacts[] | select(.name | contains("win")) | .id')
+          artifact_id_mac=$(echo "$response" | jq -r '.artifacts[] | select(.name | contains("mac")) | .id')
 
           # Save the artifact ID in an environment variable
-          echo "ARTIFACT_ID=$artifact_id" >> $GITHUB_ENV
+          echo "ARTIFACT_ID_WIN=$artifact_id_win" >> $GITHUB_ENV
+          echo "ARTIFACT_ID_MAC=$artifact_id_mac" >> $GITHUB_ENV
         env:
           TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Commit Artifact url and version changes and push to pre release branch for jenkins (Windows)
-        if: matrix.os == 'windows-latest'
+      - name: Commit Artifact url and version changes and push to pre release branch for jenkins (Windows & Mac)
         shell: bash
         run: |
-          ARTIFACT_URL_WIN="https://api.github.com/repos/eclipse-esmf/esmf-aspect-model-editor/actions/artifacts/$ARTIFACT_ID/zip"
+          ARTIFACT_URL_WIN="https://api.github.com/repos/eclipse-esmf/esmf-aspect-model-editor/actions/artifacts/$ARTIFACT_ID_WIN/zip"
+          ARTIFACT_URL_MAC="https://api.github.com/repos/eclipse-esmf/esmf-aspect-model-editor/actions/artifacts/$ARTIFACT_ID_MAC/zip"
           BRANCH_NAME="pre_release_configuration"
 
           echo "artifact_url_win=$ARTIFACT_URL_WIN" > parameters.txt
+          echo "artifact_url_mac=$ARTIFACT_URL_MAC" >> parameters.txt
           echo "version=${{ github.event.inputs.release_version }}" >> parameters.txt
 
           git config --global user.email "[email protected]"
           git config --global user.name "github-actions"
           git checkout -b $BRANCH_NAME
           git add parameters.txt
-          git commit -m "Add parameters.txt with artifact_url_win and version"
+          git commit -m "Add parameters.txt with artifact_url_win, artifact_url_mac and version"
           git push origin $BRANCH_NAME
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Trigger Jenkins Job, for signing executable
-        if: matrix.os == 'windows-latest'
         shell: bash
         run: |
           DATA='{"repository": {"url": "https://github.com/eclipse-esmf/esmf-aspect-model-editor", "html_url": "https://github.com/eclipse-esmf/esmf-aspect-model-editor", "owner": { "name": "ESMF"}}, "pusher": { "name": "GitHub Action", "email": "[email protected]"}}'
           SHA1="$(echo -n "${DATA}" | openssl dgst -sha1 -hmac "${WEBHOOK_SECRET}" | sed 's/SHA1(stdin)= //')"
           curl -X POST https://ci.eclipse.org/esmf/github-webhook/ -H "Content-Type: application/json" -H "X-GitHub-Event: push" -H "X-Hub-Signature: sha1=${SHA1}" -d "${DATA}"
-
-
-      # Release Mac and Linux executables
-      - name: Create GitHub release (Mac)
-        if: ${{ (matrix.os == 'macos-12') && (!contains( github.ref, '-rc' )) }}
-        uses: svenstaro/upload-release-action@latest
-        with:
-          overwrite: true
-          prerelease: false
-          repo_token: ${{ secrets.GITHUB_TOKEN }}
-          file: core/electron/aspect-model-editor-v${{ github.event.inputs.release_version }}-mac.dmg
-          tag: v${{ github.event.inputs.release_version }}
-
-      - name: Create GitHub pre-release (Mac)
-        if: ${{ (matrix.os == 'macos-12') && (contains( github.ref, '-rc' )) }}
-        uses: svenstaro/upload-release-action@latest
-        with:
-          overwrite: true
-          prerelease: true
-          repo_token: ${{ secrets.GITHUB_TOKEN }}
-          file: core/electron/aspect-model-editor-v${{ github.event.inputs.release_version }}-mac.dmg
-          tag: v${{ github.event.inputs.release_version }}
-
-      - name: Create GitHub release (Linux)
-        if: ${{ (matrix.os == 'ubuntu-20.04') && (!contains( github.ref, '-rc' )) }}
-        uses: svenstaro/upload-release-action@latest
-        with:
-          overwrite: true
-          prerelease: false
-          repo_token: ${{ secrets.GITHUB_TOKEN }}
-          file: core/electron/aspect-model-editor-v${{ github.event.inputs.release_version }}-linux-glibc-v${{ env.GLIBC_VERSION }}.tar.gz
-          tag: v${{ github.event.inputs.release_version }}
-
-      - name: Create GitHub pre-release (Linux)
-        if: ${{ (matrix.os == 'ubuntu-20.04') && (contains( github.ref, '-rc' )) }}
-        uses: svenstaro/upload-release-action@latest
-        with:
-          overwrite: true
-          prerelease: true
-          repo_token: ${{ secrets.GITHUB_TOKEN }}
-          file: core/electron/aspect-model-editor-v${{ github.event.inputs.release_version }}-linux-glibc-v${{ env.GLIBC_VERSION }}.tar.gz
-          tag: v${{ github.event.inputs.release_version }}

.jenkins/Jenkinsfile

@@ -1,5 +1,9 @@
 pipeline {
   agent any
+  tools {
+    maven 'apache-maven-latest'
+    jdk 'openjdk-jdk17-latest'
+  }
 
   environment {
     GITHUB_BOT_TOKEN = credentials('github-bot-token')
@@ -24,7 +28,8 @@ pipeline {
               }
             }
 
-            echo "Artifact URL: ${env.artifact_url_win}"
+            echo "Artifact URL Win: ${env.artifact_url_win}"
+            echo "Artifact URL Mac: ${env.artifact_url_mac}"
             echo "Version: ${env.version}"
           } else {
             echo "Error: parameters.txt does not exist."
@@ -33,35 +38,78 @@ pipeline {
       }
     }
 
-    stage('Download and unpack artifact') {
+    stage('Download and unpack Windows artifact') {
       steps {
         script {
+          def winOsFile = "aspect-model-editor-v${env.version}-win.zip"
           sh "curl -L -H 'Accept: application/vnd.github.v3+json' \
                         -H 'Authorization: Bearer ${GITHUB_BOT_TOKEN}' \
                         '${env.artifact_url_win}' \
-                        --output 'aspect-model-editor-v${env.version}-win.zip'"
-          sh "mkdir -p unpack_dir"
-          sh "unzip -o aspect-model-editor-v${env.version}-win.zip -d unpack_dir"
-          sh "ls -a unpack_dir"
+                        --output '${winOsFile}'"
+          sh "mkdir -p unpack_win_dir"
+          sh "unzip -o aspect-model-editor-v${env.version}-win.zip -d unpack_win_dir"
+          sh "rm '${winOsFile}'"
+          sh "ls -a unpack_win_dir"
         }
       }
     }
 
-    stage('Sign Applications') {
+    stage('Sign Windows Applications') {
       steps {
         script {
           sh "mkdir -p signed_dir"
-          sh "curl -o signed_dir/aspect-model-editor-v${env.version}-win.exe -F file=@unpack_dir/aspect-model-editor-v${env.version}-win.exe https://cbi.eclipse.org/authenticode/sign"
+          sh "curl -o signed_dir/aspect-model-editor-v${env.version}-win.exe -F file=@unpack_win_dir/aspect-model-editor-v${env.version}-win.exe https://cbi.eclipse.org/authenticode/sign"
+          sh "zip -r aspect-model-editor-v${env.version}-win.zip signed_dir"
+          sh "ls -a signed_dir"
         }
       }
     }
 
-    stage('Release signed WINDOWS artifact to GitHub Releases') {
+    stage('Download Mac artifact') {
       steps {
         script {
+          sh "mkdir -p unpack_mac_dir"
+          def macOsFile = "aspect-model-editor-v${env.version}-mac.zip"
+          sh "curl -L -H 'Accept: application/vnd.github.v3+json' \
+                        -H 'Authorization: Bearer ${GITHUB_BOT_TOKEN}' \
+                        '${env.artifact_url_mac}' \
+                        --output 'unpack_mac_dir/${macOsFile}'"
+          sh "unzip -o unpack_mac_dir/${macOsFile} -d unpack_mac_dir"
+          sh "unzip -o unpack_mac_dir/${macOsFile} -d unpack_mac_dir"
+          sh "rm 'unpack_mac_dir/${macOsFile}'"
+          sh "ls -a unpack_mac_dir"
+        }
+      }
+    }
+
+    stage('Sign Electron Application on Mac') {
+      steps {
+        script {
+          nodejs(nodeJSInstallationName: 'node_20.x') {
+            sh '''
+              echo "NPM version:"
+              npm --version
+              npm install isbinaryfile
+              cd core
+              chmod +x electron-libs/scripts/sign.sh
+              chmod +x electron-libs/scripts/notarize.sh
+              node electron-libs/scripts/after-pack.js
+            '''
+          }
+        }
+      }
+    }
+
+    stage('Release signed Windows and Mac artifact to GitHub Releases') {
+      steps {
+        script {
+          def macOsFile = "aspect-model-editor-v${env.version}-mac.zip"
+          sh "mv unpack_mac_dir/notarized.zip ./${macOsFile}"
+
           def repo = "eclipse-esmf/esmf-aspect-model-editor"
           def tagName = "v${env.version}"
-          def fileName = "signed_dir/aspect-model-editor-v${env.version}-win.exe"
+          def fileNameWin = "aspect-model-editor-v${env.version}-win.zip"
+          def fileNameMac = "aspect-model-editor-v${env.version}-mac.zip"
           def releaseId = ""
 
           def tagExists = sh(script: """
@@ -97,14 +145,24 @@ pipeline {
                          -H "Accept: application/vnd.github+json" \\
                          -H "Authorization: Bearer \$GITHUB_BOT_TOKEN" \
                          -H "Content-Type: application/octet-stream" \
-                         --data-binary @${fileName} \
-                         "https://uploads.github.com/repos/${repo}/releases/${releaseId}/assets?name=aspect-model-editor-v${env.version}-win.exe"
+                         --data-binary @${fileNameWin} \
+                         "https://uploads.github.com/repos/${repo}/releases/${releaseId}/assets?name=${fileNameWin}"
+                    """
+
+          sh """
+                    curl -L \
+                         -X POST \
+                         -H "Accept: application/vnd.github+json" \\
+                         -H "Authorization: Bearer \$GITHUB_BOT_TOKEN" \
+                         -H "Content-Type: application/octet-stream" \
+                         --data-binary @${fileNameMac} \
+                         "https://uploads.github.com/repos/${repo}/releases/${releaseId}/assets?name=${fileNameMac}"
                     """
 
           sh """
                     curl -X DELETE \
                          -H "Authorization: Bearer \$GITHUB_BOT_TOKEN" \
-                         "https://api.github.com/repos/eclipse-esmf/esmf-aspect-model-editor/git/refs/heads/pre_release_configuration"
+                         "https://api.github.com/repos/eclipse-esmf/esmf-aspect-model-editor-backend/git/refs/heads/pre_release_configuration"
                     """
         }
       }

core/apps/ame-e2e/src/fixtures/valid-documentation.html

@@ -11,7 +11,7 @@
   ~ SPDX-License-Identifier: MPL-2.0
   -->
 
-<!DOCTYPE html>
+<!doctype html>
 <html lang="en">
   <head>
     <title>Test Documentation</title>

core/apps/ame-e2e/src/integration/drag-and-drop/different-namespace/external-characteristic-reference.cy.ts

@@ -39,7 +39,7 @@ describe('Test drag and drop ext characteristic', () => {
       },
       {
         fixture: `/external-reference/different-namespace/without-childrens/${fileName}`,
-      }
+      },
     );
 
     cy.visitDefault().then(() =>
@@ -61,7 +61,7 @@ describe('Test drag and drop ext characteristic', () => {
           expect(rdf).to.contain(':property1 a samm:Property');
           expect(rdf).to.contain('samm:characteristic ext-different:ExternalCharacteristic');
           expect(rdf).not.contain(':ExternalCharacteristic a samm:Characteristic');
-        })
+        }),
     );
   });
 });

core/apps/ame-e2e/src/integration/drag-and-drop/different-namespace/external-constraint-reference.cy.ts

@@ -41,7 +41,7 @@ describe('Test drag and drop ext constraint', () => {
       },
       {
         fixture: `/external-reference/different-namespace/without-childrens/${fileName}`,
-      }
+      },
     );
 
     cy.visitDefault().then(() =>
@@ -71,7 +71,7 @@ describe('Test drag and drop ext constraint', () => {
           expect(rdf).to.contain(':Characteristic1 a samm:Characteristic');
           expect(rdf).to.contain('samm-c:constraint ext-different:ExternalConstraint');
           expect(rdf).not.contain(':ExternalConstraint a samm:Constraint');
-        })
+        }),
     );
   });
 });

core/apps/ame-e2e/src/integration/drag-and-drop/different-namespace/external-entity-reference.cy.ts

@@ -38,7 +38,7 @@ describe('Test drag and drop', () => {
       },
       {
         fixture: `/external-reference/different-namespace/without-childrens/${fileName}`,
-      }
+      },
     );
 
     cy.visitDefault().then(() =>
@@ -64,7 +64,7 @@ describe('Test drag and drop', () => {
           expect(rdf).to.contain('samm:dataType ext-different:ExternalEntity');
 
           expect(rdf).not.contain(':ExternalEntity a samm:Entity');
-        })
+        }),
     );
   });
 });

core/apps/ame-e2e/src/integration/drag-and-drop/different-namespace/external-property-reference-with-children.cy.ts

@@ -38,7 +38,7 @@ describe('Test drag and drop ext properties', () => {
       },
       {
         fixture: `/external-reference/different-namespace/with-childrens/${fileName}`,
-      }
+      },
     );
 
     cy.visitDefault().then(() =>
@@ -69,7 +69,7 @@ describe('Test drag and drop ext properties', () => {
           expect(rdf).not.contain('samm:characteristic samm-c:Boolean');
           expect(rdf).not.contain(':ChildrenCharacteristic2 a samm:Characteristic');
           expect(rdf).not.contain(':ChildrenEntity2 a samm:Entity');
-        })
+        }),
     );
   });
 });