Repository navigation
ci: add manual self-hosted goreleaser benchmark workflow - #922
Conversation
Skip-publish dry run on the Mac Mini M4 self-hosted runner to compare build/sign/notarize time against the hosted macos-latest runner. Temporary β remove once the comparison is done.
There was a problem hiding this comment.
π‘ Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: fa46035f49
βΉοΈ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with π.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| cache: true | ||
| - name: Import GPG Key | ||
| run: | | ||
| echo "${{ secrets.GPG_PRIVATE_KEY }}" | gpg --import --no-tty --batch |
There was a problem hiding this comment.
Avoid persisting the signing key on the runner
When this manual workflow runs on the reusable self-hosted Mac runner, gpg --import writes the private signing key into the runner user's default GnuPG home and nothing removes it afterward. That leaves the release signing key available to later jobs on the same machine, unlike the existing hosted runner workflow where the VM is discarded; import into a temporary GNUPGHOME and clean it up, or explicitly delete the secret key in a post step.
Useful? React with πΒ / π.
Codecov Reportβ
All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #922 +/- ##
==========================================
+ Coverage 22.76% 22.81% +0.04%
==========================================
Files 42 42
Lines 4182 4182
==========================================
+ Hits 952 954 +2
+ Misses 3114 3113 -1
+ Partials 116 115 -1 β View full report in Codecov by Harness. π New features to boost your workflow:
|
Summary
workflow_dispatch) copy of the goreleaser pipeline that runs on the self-hosted Mac Mini M4 runner instead ofmacos-latest.--skip=publishso it never creates a real GitHub release or touches the homebrew-tap repo β pure build/sign/notarize timing benchmark.Test plan
gh workflow run goreleaser-self-hosted-test.yml -f tag=v0.1.26