feat: ci cd + gh env vars for signing #1

	name: 'publish'
	on:
	push:
	branches:
	- main

	jobs:
	publish-tauri:
	permissions:
	contents: write
	strategy:
	fail-fast: false
	matrix:
	platform: [macos-latest]
	runs-on: ${{ matrix.platform }}

	steps:
	- name: Checkout repository
	uses: actions/checkout@v3

	- name: Rust setup
	uses: dtolnay/rust-toolchain@stable

	- name: Rust cache
	uses: swatinem/rust-cache@v2
	with:
	workspaces: './src-tauri -> target'

	- name: Sync node version and setup cache
	uses: actions/setup-node@v3
	with:
	node-version: 'lts/*'
	cache: 'pnpm'

	- name: Install frontend deps
	run: pnpm install

	- name: Build the app
	uses: tauri-apps/tauri-action@v0
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
	APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
	APPLE_SIGNING_IDENTITY: ${{ secrets.APPLE_SIGNING_IDENTITY }}
	APPLE_ID: ${{ secrets.APPLE_ID }}
	APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }}
	APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
	with:
	tagName: flowers-v__VERSION__
	releaseName: 'flowers v__VERSION__'
	releaseBody: 'See the assets to download this version and install.'
	releaseDraft: true
	prerelease: false

Provide feedback