AvantiPoint Workflow Templates

This repo contains various .NET Workflows to make it easier to create GitHub Actions for your projects. For more information on how to set up reusable workflows, see GitHub Actions Docs. For a QuickStart check out the samples in the Templates directory.

These workflow templates are designed to help make it easier to quickly set up GitHub Actions for .NET Projects. The core set of templates are meant to make it easier to setup 4 basic types of GitHub Actions:

• Pull Request Integration
• Continuous Integration / Continuous Delivery
• Create a GitHub Release
• Publish to NuGet.org when the GitHub Release is Published

Example

Build a NuGet package & deploy to a private NuGet feed and NuGet.org

jobs:
  build:
    uses: avantipoint/workflow-templates/.github/workflows/dotnet-build.yml@master
    permissions:
      statuses: write
      checks: write
    with:
      name: My Project
      install-workload: maui
      solution-path: MyProject.sln

  deploy-internal:
    needs: build
    uses: avantipoint/workflow-templates/.github/workflows/deploy-nuget.yml@master
    with:
      name: Deploy Internally
    secrets:
      feedUrl: https://my-private-feed.com/v3/index.json
      apiKey: ${{ secrets.MYPRIVATEFEED_API_KEY }}

  deploy-nuget:
    needs: build
    uses: avantipoint/workflow-templates/.github/workflows/deploy-nuget.yml@master
    environment: NuGetOrg
    with:
      name: Deploy NuGet.org
    secrets:
      apiKey: ${{ secrets.NUGET_ORG_API_KEY }}
      codeSignKeyVault: ${{ secrets.CODESIGN_KEYVAULT }}
      codeSignClientId: ${{ secrets.CODESIGN_CLIENTID }}
      codeSignClientSecret: ${{ secrets.CODESIGN_CLIENTSECRET }}
      codeSignTenantId: ${{ secrets.CODESIGN_TENANTID }}
      codeSignCertificate: ${{ secrets.CODESIGN_CERTIFICATE }}

NOTE If you are running tests, be sure to add the permissions so that the Test Results can be viewed. Failure to add the permissions will result in a failure running the workflow.

NuGet Package Signing

Several of the templates include an optional NuGet package signing step. This step uses the NuGetKeyVaultSignTool. It only supports authentication with an Azure Key Vault using a Client Id & Client Secret.

Parameter	Description
codeSignKeyVault	The name of the Key Vault to use for signing.
codeSignClientId	The Client Id of the Key Vault to use for signing.
codeSignClientSecret	The Client Secret of the Key Vault to use for signing.
codeSignTenantId	The Tenant Id of the Key Vault to use for signing.
codeSignCertificate	The name of the certificate to use for signing.
codeSignTimestampUrl	The URL of the timestamp server to use for signing. Uses DigiCert Timestamp server by default.

How to Setup Package Signing

1. Create a Key Vault in Azure. See the Azure Key Vault documentation for more information. Make note of the Vault URI https://{your vault name}.vault.azure.net/
2. Create or Upload a Certificate to the Key Vault. You may want to generate the CSR and upload a certificate once issued from a valid CA.
3. Make note of the Certificate Name that you choose.
4. Under the Azure AD Tenant for your Azure Subscription copy the Tenant Id.
5. Next Create a new App Registration in Azure AD. See the Azure AD documentation for more information. Be sure to copy the Client Id of the App registration.
6. Navigate to the Certificates & Secrets section of the App Registration and create a new Secret. See the Azure AD documentation for more information. Be sure to copy the secret as it will not be displayed again.
7. Finally add each of these values as secrets in your GitHub organization or repository so that you can reference them from your workflow.

NOTE The DigiCert Timestamp server is automatically selected. If you want to use a different timestamp server, you can add the codeSignTimestampUrl parameter to your workflow.

Supported Workflows:

Workflow	Description
*deploy-nuget.yml	Deploy a NuGet package to a private NuGet feed or NuGet.org from a Build Artifact
deploy-nuget-from-release.yml	Deploys a NuGet package from a release tag
*dotnet-build.yml	This workflow is used for building newer projects with the dotnet build command.
*msbuild-build.yml	This workflow is used for building typically older / Xamarin based projects with the msbuild command.
generate-release.yml	Generates a GitHub Release using a Build Artifact. This will evaluate the version of a Specified NuGet package to determine the version of the release.

* Supports Code Signing as part of the Workflow