Library scan: log summary and show popup #18383

Sign in to view logs

Workflow file for this run

.github/workflows/build.yml at 9e45b1c

	# yaml-language-server: $schema=https://json.schemastore.org/github-workflow

	name: Build

	on:
	push:
	pull_request:

	permissions:
	contents: read # to fetch code (actions/checkout)

	jobs:
	build:
	strategy:
	fail-fast: false
	matrix:
	include:
	- name: Ubuntu 22.04
	os: ubuntu-22.04
	cmake_args: >-
	-DQT6=ON
	-DQML=ON
	-DBULK=ON
	-DFFMPEG=ON
	-DLOCALECOMPARE=ON
	-DMAD=ON
	-DMODPLUG=ON
	-DWAVPACK=ON
	-DINSTALL_USER_UDEV_RULES=OFF
	ctest_args: []
	compiler_cache: ccache
	compiler_cache_path: /home/runner/.cache/ccache
	compiler_cache_id: qt6
	cpack_generator: DEB
	buildenv_basepath: /home/runner/buildenv
	buildenv_script: tools/debian_buildenv.sh
	artifacts_name: Ubuntu 22.04 Qt6 DEB
	artifacts_path: build/*.deb
	artifacts_slug: ubuntu-jammy
	qt_qpa_platform: offscreen
	- name: macOS 12 x64
	os: macos-12
	cmake_args: >-
	-DBULK=ON
	-DCOREAUDIO=ON
	-DHSS1394=ON
	-DMACOS_BUNDLE=ON
	-DMODPLUG=ON
	-DQT6=ON
	-DQML=OFF
	-DWAVPACK=ON
	-DVCPKG_TARGET_TRIPLET=x64-osx-min1100-release
	-DVCPKG_DEFAULT_HOST_TRIPLET=x64-osx-min1100-release
	# TODO: Fix this broken test on macOS
	ctest_args: --exclude-regex DirectoryDAOTest.relocateDirectory
	cpack_generator: DragNDrop
	compiler_cache: ccache
	compiler_cache_path: /Users/runner/Library/Caches/ccache
	compiler_cache_id: x64
	buildenv_basepath: /Users/runner/buildenv
	buildenv_script: tools/macos_release_buildenv.sh
	artifacts_name: macOS Intel DMG
	artifacts_path: build/*.dmg
	artifacts_slug: macos-macosintel
	qt_qpa_platform: offscreen
	- name: macOS 12 arm64
	os: macos-12
	cmake_args: >-
	-DBULK=ON
	-DCOREAUDIO=ON
	-DHSS1394=ON
	-DMACOS_BUNDLE=ON
	-DMODPLUG=ON
	-DQT6=ON
	-DQML=ON
	-DWAVPACK=ON
	-DVCPKG_TARGET_TRIPLET=arm64-osx-min1100-release
	-DVCPKG_DEFAULT_HOST_TRIPLET=x64-osx-min1100-release
	# TODO: Fix this broken test on macOS
	crosscompile: true
	cpack_generator: DragNDrop
	compiler_cache: ccache
	compiler_cache_path: /Users/runner/Library/Caches/ccache
	compiler_cache_id: arm64
	buildenv_basepath: /Users/runner/buildenv
	buildenv_script: tools/macos_arm64-cross-release_buildenv.sh
	artifacts_name: macOS ARM DMG
	artifacts_path: build/*.dmg
	artifacts_slug: macos-macosarm
	qt_qpa_platform: offscreen
	- name: Windows 2019 (MSVC)
	os: windows-2019
	# TODO: Re-enable FFmpeg after licensing issues have been clarified
	# Attention: If you change the cmake_args for the Windows CI build,
	# also adjust the for the local Windows build setup in
	# ./tools/windows_buildenv.bat
	cmake_args: >-
	-DBULK=ON
	-DFFMPEG=OFF
	-DHSS1394=ON
	-DLOCALECOMPARE=ON
	-DMAD=ON
	-DMEDIAFOUNDATION=ON
	-DMODPLUG=ON
	-DQT6=ON
	-DQML=OFF
	-DWAVPACK=ON
	-DVCPKG_TARGET_TRIPLET=x64-windows-release
	-DVCPKG_DEFAULT_HOST_TRIPLET=x64-windows-release
	cc: cl
	cxx: cl
	# TODO: Fix these broken tests on Windows
	ctest_args: --exclude-regex '^AutoDJProcessorTest.*$'
	cpack_generator: WIX
	buildenv_basepath: C:\buildenv
	buildenv_script: tools/windows_buildenv.bat
	artifacts_name: Windows Installer
	artifacts_path: build/*.msi
	artifacts_slug: windows-win64
	qt_qpa_platform: windows

	env:
	# macOS codesigning
	APPLE_CODESIGN_IDENTITY: EF241CF990A9BE5477438AEE1F308F76F33FD100
	MACOS_CODESIGN_CERTIFICATE_P12_BASE64: ${{ secrets.MACOS_CODESIGN_CERTIFICATE_P12_BASE64 }}
	MACOS_CODESIGN_CERTIFICATE_PASSWORD: ${{ secrets.MACOS_CODESIGN_CERTIFICATE_PASSWORD }}

	runs-on: ${{ matrix.os }}
	name: ${{ matrix.name }}
	container: ${{ matrix.container }}
	outputs:
	artifact-macos-macosintel: ${{ steps.prepare_deploy.outputs.artifact-macos-macosintel }}
	artifact-macos-macosarm: ${{ steps.prepare_deploy.outputs.artifact-macos-macosarm }}
	artifact-windows-win64: ${{ steps.prepare_deploy.outputs.artifact-windows-win64 }}
	steps:
	- name: "Check out repository"
	uses: actions/[email protected]
	with:
	# This is necessary for making `git describe` work.
	fetch-depth: 0

	- name: "[Arch Linux] Workaround for the 'unsafe repository' issue caused by CVE-2022-24765"
	if: matrix.container != null
	# See https://github.com/actions/checkout/issues/760 for details
	run: git config --global --add safe.directory "$GITHUB_WORKSPACE"

	- name: "Ensure that all tags are fetched"
	# Works around an issue where not the latest tag is not fetched when the
	# workflow is triggered by a tag push event.
	# Possibly related: actions/checkout#290
	run: git fetch origin --force --tags

	- name: "[macOS] Set up cmake"
	uses: jwlawson/[email protected]
	# Ubuntu 22.04 should use the CMake version from the repos.
	if: runner.os == 'macOS'
	with:
	# This should always match the minimum required version in
	# our CMakeLists.txt
	cmake-version: "3.21.x"

	- name: "[Windows] Set up cmake"
	uses: jwlawson/[email protected]
	# Ubuntu 22.04 should use the CMake version from the repos.
	if: runner.os == 'Windows'
	with:
	# This is a workaround for a SSL false positive in cmake 3.26.4
	# When downloading the manual. 3.21 is required for installing the
	# ANGLE Dlls via IMPORTED_RUNTIME_ARTIFACTS
	cmake-version: "3.21.x"

	- name: "[Windows] Set up MSVC Developer Command Prompt"
	if: runner.os == 'Windows'
	uses: ilammy/msvc-dev-cmd@v1

	- name: "[macOS] install ccache and make"
	if: runner.os == 'macOS'
	run: \|
	brew install ccache ninja

	- name: "[macOS/Windows] Get build environment name"
	if: runner.os != 'Linux'
	run: ${{ matrix.buildenv_script }} name

	- name: "[macOS/Windows] Set up build environment cache"
	if: runner.os != 'Linux'
	uses: actions/cache@v4
	with:
	path: ${{ matrix.buildenv_basepath }}
	key: ${{ runner.os }}-buildenv-${{ env.BUILDENV_NAME }}

	- name: "[macOS] Import Apple code signing identity"
	id: apple_codesign
	if: runner.os == 'macOS' && env.MACOS_CODESIGN_CERTIFICATE_P12_BASE64 != null && env.MACOS_CODESIGN_CERTIFICATE_PASSWORD != null
	run: \|
	# Decode the certificate
	echo "${{ env.MACOS_CODESIGN_CERTIFICATE_P12_BASE64 }}" \| base64 -d -o ~/certificate.p12

	# Create a temporary keychain for the certificate and import it.
	security create-keychain -p mixxx Mixxx.keychain
	security unlock-keychain -p mixxx Mixxx.keychain
	security import ~/certificate.p12 -k Mixxx.keychain \
	-P "${MACOS_CODESIGN_CERTIFICATE_PASSWORD}" -A
	security set-key-partition-list -S "apple-tool:,apple:" -k mixxx Mixxx.keychain
	# Add keychain to search list
	security list-keychains -s Mixxx.keychain
	# Prevent keychain access from timing out
	security set-keychain-settings Mixxx.keychain
	echo "CMAKE_ARGS_EXTRA=${CMAKE_ARGS_EXTRA} -DAPPLE_CODESIGN_IDENTITY=${APPLE_CODESIGN_IDENTITY}" >> "${GITHUB_ENV}"

	- name: "[macOS/Linux] Set up build environment"
	if: matrix.buildenv_script != null && runner.os != 'Windows'
	run: ${{ matrix.buildenv_script }} setup
	env:
	BUILDENV_BASEPATH: ${{ matrix.buildenv_basepath }}

	- name: "[Windows] Set up build environment"
	if: matrix.buildenv_script != null && runner.os == 'Windows'
	# With the cmd shell the ERRORLEVEL is checked
	shell: cmd
	run: ${{ matrix.buildenv_script }} setup
	env:
	BUILDENV_BASEPATH: ${{ matrix.buildenv_basepath }}
	BUILDENV_RELEASE: TRUE

	- name: "[Ubuntu/macOS] Set up GitHub cache for ccache"
	if: runner.os != 'windows'
	uses: actions/cache@v4
	with:
	path: ${{ matrix.compiler_cache_path }}
	key: ${{ matrix.os }}-${{ matrix.compiler_cache_id }}-${{ github.head_ref }}-${{ github.run_number }}
	restore-keys: \|
	${{ matrix.os }}-${{ matrix.compiler_cache_id }}-${{ github.head_ref }}
	${{ matrix.os }}-${{ matrix.compiler_cache_id }}

	- name: "[Ubuntu/macOS] Set up ccache"
	# GitHub Actions gives us 10 GB of cache.
	# 4 runs * 2 GB = 8 GB
	run: \|
	${{ matrix.compiler_cache }} --zero-stats
	${{ matrix.compiler_cache }} --max-size=2G
	if: runner.os != 'windows'

	- name: "Create build directory"
	run: mkdir build

	- name: "Configure"
	run: >-
	cmake ${{ matrix.cmake_args }} ${{ env.CMAKE_ARGS_EXTRA }}
	-DCMAKE_BUILD_TYPE=RelWithDebInfo
	-DCMAKE_PREFIX_PATH="${{ env.CMAKE_PREFIX_PATH }}"
	-DWARNINGS_FATAL=ON
	-DDEBUG_ASSERTIONS_FATAL=OFF
	-DBATTERY=ON
	-DBROADCAST=ON
	-DDOWNLOAD_MANUAL=ON
	-DHID=ON
	-DKEYFINDER=ON
	-DLILV=ON
	-DOPUS=ON
	-DQTKEYCHAIN=ON
	-DVINYLCONTROL=ON
	-DCMAKE_VERBOSE_MAKEFILE=OFF
	-L
	..
	working-directory: build
	env:
	CC: ${{ matrix.cc }}
	CXX: ${{ matrix.cxx }}

	- name: "[Ubuntu/macOS] Set up gcc/clang problem matcher"
	if: runner.os != 'Windows'
	uses: ammaraskar/[email protected]

	- name: "[Windows] Set up MSVC problem matcher"
	if: runner.os == 'Windows'
	uses: ammaraskar/[email protected]

	- name: "Build"
	run: cmake --build . --config RelWithDebInfo
	working-directory: build
	env:
	CC: ${{ matrix.cc }}
	CXX: ${{ matrix.cxx }}
	CMAKE_BUILD_PARALLEL_LEVEL: 2
	# GitHub Actions automatically zstd compresses caches
	CCACHE_NOCOMPRESS: true

	- name: "[Ubuntu/macOS] Print compiler cache stats"
	if: runner.os != 'windows'
	run: \|
	${{ matrix.compiler_cache }} --show-stats
	${{ matrix.compiler_cache }} --cleanup

	- name: "Test"
	if: matrix.crosscompile != true
	run: ctest --timeout 45 ${{ matrix.ctest_args }}
	working-directory: build
	env:
	# Render analyzer waveform tests to an offscreen buffer
	QT_QPA_PLATFORM: ${{ matrix.qt_qpa_platform }}
	GTEST_COLOR: 1
	# Windows tests fail randomly if run in parallel
	CTEST_PARALLEL_LEVEL: 1
	CTEST_OUTPUT_ON_FAILURE: 1

	- name: Benchmark
	if: matrix.crosscompile != true
	run: cmake --build . --target mixxx-benchmark --config RelWithDebInfo
	working-directory: build
	env:
	# Render analyzer waveform tests to an offscreen buffer
	QT_QPA_PLATFORM: ${{ matrix.qt_qpa_platform }}

	- name: "[Windows] Sign executables"
	env:
	AZURE_TENANT_ID: ${{ secrets.AZURE_TENANT_ID }}
	if: runner.os == 'Windows' && env.AZURE_TENANT_ID
	uses: azure/[email protected]
	with:
	azure-tenant-id: ${{ secrets.AZURE_TENANT_ID }}
	azure-client-id: ${{ secrets.AZURE_CLIENT_ID }}
	azure-client-secret: ${{ secrets.AZURE_CLIENT_SECRET }}
	endpoint: https://weu.codesigning.azure.net/
	code-signing-account-name: mixxx
	certificate-profile-name: mixxx
	files-folder: build
	files-folder-filter: exe
	file-digest: SHA256
	timestamp-rfc3161: http://timestamp.acs.microsoft.com
	timestamp-digest: SHA256
	timeout: 600

	- name: "Package"
	if: matrix.cpack_generator != null
	run: cpack -G ${{ matrix.cpack_generator }} -V
	working-directory: build

	- name: "[Ubuntu] Import PPA GPG key"
	if: startsWith(matrix.os, 'ubuntu') && env.RRYAN_AT_MIXXX_DOT_ORG_GPG_PRIVATE_KEY != null
	run: gpg --import <(echo "${{ secrets.RRYAN_AT_MIXXX_DOT_ORG_GPG_PRIVATE_KEY }}")
	env:
	RRYAN_AT_MIXXX_DOT_ORG_GPG_PRIVATE_KEY: ${{ secrets.RRYAN_AT_MIXXX_DOT_ORG_GPG_PRIVATE_KEY }}

	- name: "Package for PPA"
	# No need to do the PPA build for both Ubuntu versions
	if: matrix.name == 'Ubuntu 22.04'
	run: \|
	if [[ "${{ github.ref }}" == "refs/heads/main" ]] && [[ "${{ github.repository }}" == "mixxxdj/mixxx" ]]; then
	CPACK_ARGS="-D DEB_UPLOAD_PPA=ppa:mixxx/nightlies"
	elif [[ "${{ github.ref }}" == "refs/heads/2.5" ]] && [[ "${{ github.repository }}" == "mixxxdj/mixxx" ]]; then
	CPACK_ARGS="-D DEB_UPLOAD_PPA=ppa:mixxx/mixxxbetas"
	elif [[ "${{ github.ref }}" =~ ^refs/tags/[0-9]+\.[0-9]+\.[0-9]+$ ]] && [[ "${{ github.repository }}" == "mixxxdj/mixxx" ]]; then
	CPACK_ARGS="-D DEB_UPLOAD_PPA=ppa:mixxx/mixxx"
	else
	# only build the source DEB, do not upload
	CPACK_ARGS="-D DEB_SOURCEPKG=ON"
	fi
	cpack -G External $CPACK_ARGS
	working-directory: build

	- name: "[macOS] Sign, Notarize, and Staple Package"
	if: runner.os == 'macOS' && env.MACOS_CODESIGN_CERTIFICATE_P12_BASE64 != null && env.MACOS_CODESIGN_CERTIFICATE_PASSWORD != null && env.APPLE_APP_SPECIFIC_PASSWORD != null
	run: packaging/macos/sign_notarize_staple.sh build/*.dmg
	env:
	APPLE_ID_USERNAME: [email protected]
	APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.MACOS_NOTARIZATION_APP_SPECIFIC_PASSWORD }}
	APPLE_TEAM_ID: JBLRSP95FC

	- name: "[Windows] Sign installer"
	env:
	AZURE_TENANT_ID: ${{ secrets.AZURE_TENANT_ID }}
	if: runner.os == 'Windows' && env.AZURE_TENANT_ID
	uses: azure/[email protected]
	with:
	azure-tenant-id: ${{ secrets.AZURE_TENANT_ID }}
	azure-client-id: ${{ secrets.AZURE_CLIENT_ID }}
	azure-client-secret: ${{ secrets.AZURE_CLIENT_SECRET }}
	endpoint: https://weu.codesigning.azure.net/
	code-signing-account-name: mixxx
	certificate-profile-name: mixxx
	files-folder: build
	files-folder-filter: msi
	file-digest: SHA256
	timestamp-rfc3161: http://timestamp.acs.microsoft.com
	timestamp-digest: SHA256
	timeout: 600

	- name: "Prepare for deployment"
	# Copy the desired directory structure to the deploy/ directory. This
	# also generates metadata for file artifact and write it to the job
	# output using the artifacts_slug value.
	id: prepare_deploy
	if: github.event_name == 'push' && matrix.artifacts_path != null
	shell: bash
	run: >
	if [[ "${GITHUB_REF}" =~ ^refs/tags/.* ]];
	then
	export DEPLOY_PATH='releases/{git_describe}/mixxx-{git_describe}-{package_slug}{ext}';
	else
	export DEPLOY_PATH='snapshots/{git_branch}/mixxx-{git_describe}-{package_slug}{ext}';
	fi;
	python3 tools/deploy.py prepare-deployment
	--slug '${{ matrix.artifacts_slug }}'
	--output-dir 'deploy/'
	--dest-path "${DEPLOY_PATH}"
	--dest-url 'https://downloads.mixxx.org'
	${{ matrix.artifacts_path }}

	# Warning: do not move this step before restoring caches or it will break caching due to
	# https://github.com/actions/cache/issues/531
	- name: "[Windows] Install rsync and openssh"
	env:
	SSH_PRIVATE_KEY: ${{ secrets.DOWNLOADS_HOSTGATOR_DOT_MIXXX_DOT_ORG_KEY }}
	if: runner.os == 'Windows' && github.event_name == 'push' && env.SSH_PRIVATE_KEY != null
	run: \|
	$Env:PATH="c:\msys64\usr\bin;$Env:PATH"
	pacman -S --noconfirm coreutils bash rsync openssh
	# Unfortunately, mixing executables from msys64 and mingw (i.e. Git
	# Bash) does not work properly and leads to errors like these:
	#
	# 0 [main] python3 (5248) C:\msys64\usr\bin\python3.exe: *** fatal error - cygheap base mismatch detected - 0x180347408/0x180352408.
	#
	# Even when prepending the MSYS2 binary directory to %PATH%, GitHub
	# Actions will still pick the Git Bash executable over the MSYS2 one
	# when using `shell: bash`. Since it's not feasible to set `shell` to
	# an absolute path in a cross-platform build workflow, we overwrite the
	# git bash executable with the MSYS2 one.
	#
	# Also see related issue:
	# https://github.com/actions/virtual-environments/issues/594
	Copy-Item -Path "C:\msys64\usr\bin\bash.exe" -Destination "C:\Program Files\Git\bin\bash.exe" -Force
	# By default, MSYS2 uses an
	# /etc/profile file that changes
	# the current working directory
	# when bash is started. We don't
	# want this behavior,so we just
	# delete it.
	Remove-Item -Path "C:\msys64\etc\profile"
	# Add MSYS2's tools to %PATH%.
	Add-Content -Path "$Env:GITHUB_ENV" -Value "PATH=$Env:PATH"

	- name: "Set up SSH Agent"
	if: github.event_name == 'push' && env.SSH_PRIVATE_KEY != null
	shell: bash
	env:
	SSH_AUTH_SOCK: /tmp/ssh_agent.sock
	SSH_PRIVATE_KEY: ${{ secrets.DOWNLOADS_HOSTGATOR_DOT_MIXXX_DOT_ORG_KEY }}
	SSH_HOST: downloads-hostgator.mixxx.org
	run: \|
	ssh-agent -a $SSH_AUTH_SOCK > /dev/null
	ssh-add - <<< "${SSH_PRIVATE_KEY}"
	mkdir -p "${HOME}/.ssh"
	ssh-keyscan "${SSH_HOST}" >> "${HOME}/.ssh/known_hosts"
	echo "SSH_AUTH_SOCK=${SSH_AUTH_SOCK}" >> "${GITHUB_ENV}"

	- name: "[macOS/Windows] Upload build to downloads.mixxx.org"
	# skip deploying Ubuntu builds to downloads.mixxx.org because these are deployed to the PPA
	if: runner.os != 'Linux' && github.event_name == 'push' && env.SSH_AUTH_SOCK != null
	shell: bash --login -eo pipefail "{0}"
	run: rsync --verbose --recursive --checksum --times --delay-updates "deploy/" "${SSH_USER}@${SSH_HOST}:${DESTDIR}/"
	env:
	DESTDIR: public_html/downloads
	SSH_HOST: downloads-hostgator.mixxx.org
	SSH_USER: mixxx

	# Workaround for https://github.com/actions/cache/issues/531
	- name: Use system tar & zstd from Chocolatey for caching
	if: runner.os == 'Windows'
	shell: bash
	run: \|
	echo "C:/Windows/System32;C:/ProgramData/Chocolatey/bin" >> $GITHUB_PATH

	- name: "Upload GitHub Actions artifacts"
	if: matrix.artifacts_path != null
	uses: actions/[email protected]
	with:
	name: ${{ matrix.artifacts_name }}
	path: ${{ matrix.artifacts_path }}

	update_manifest:
	name: "Update manifest file on download server"
	runs-on: ubuntu-latest
	needs: build
	# Always run this job, even if one or more jobs from the `build` jobs
	# fail to allow partial updates of the manifest.
	# Don't run it on forks that do not have access to our external
	# infrastructure, though.
	if: always() && github.repository == 'mixxxdj/mixxx'
	steps:
	- name: "Check out repository"
	uses: actions/[email protected]
	with:
	fetch-depth: 0

	- name: "Ensure that all tags are fetched"
	# Works around an issue where not the latest tag is not fetched when the
	# workflow is triggered by a tag push event.
	# Possibly related: actions/checkout#290
	run: git fetch origin --force --tags

	- name: "Collect Artifacts Metadata & Write Manifest"
	# Retrieve the metadata from the matrix job's outputs, merge them into a
	# single JSON document and then deploy to the server.
	if: github.event_name == 'push' && env.SSH_PASSWORD != null
	run: >
	if [[ "${GITHUB_REF}" =~ ^refs/tags/.* ]];
	then
	export DEPLOY_PATH='releases/{git_describe}/manifest.json';
	else
	export DEPLOY_PATH='snapshots/{git_branch}/manifest.json';
	fi;
	python3 tools/deploy.py generate-manifest
	--update
	--output-dir 'deploy/'
	--dest-path "${DEPLOY_PATH}"
	--dest-url 'https://downloads.mixxx.org'
	env:
	JOB_DATA: ${{ toJSON(needs.build) }}
	SSH_PASSWORD: ${{ secrets.DOWNLOADS_HOSTGATOR_DOT_MIXXX_DOT_ORG_KEY_PASSWORD }}

	- name: "Set up SSH Agent"
	if: github.event_name == 'push' && env.SSH_PRIVATE_KEY != null && env.MANIFEST_DIRTY != null && env.MANIFEST_DIRTY != '0'
	shell: bash
	env:
	SSH_AUTH_SOCK: /tmp/ssh_agent.sock
	SSH_PRIVATE_KEY: ${{ secrets.DOWNLOADS_HOSTGATOR_DOT_MIXXX_DOT_ORG_KEY }}
	SSH_HOST: downloads-hostgator.mixxx.org
	run: \|
	ssh-agent -a $SSH_AUTH_SOCK > /dev/null
	ssh-add - <<< "${SSH_PRIVATE_KEY}"
	mkdir -p "${HOME}/.ssh"
	ssh-keyscan "${SSH_HOST}" >> "${HOME}/.ssh/known_hosts"
	echo "SSH_AUTH_SOCK=${SSH_AUTH_SOCK}" >> "${GITHUB_ENV}"

	- name: "Deploy Manifest"
	if: github.event_name == 'push' && env.SSH_AUTH_SOCK != null
	shell: bash
	run: rsync --verbose --recursive --checksum --times --delay-updates "deploy/" "${SSH_USER}@${SSH_HOST}:${DESTDIR}/"
	env:
	DESTDIR: public_html/downloads
	SSH_HOST: downloads-hostgator.mixxx.org
	SSH_USER: mixxx

	- name: "Trigger Netlify build"
	if: env.NETLIFY_BUILD_HOOK != null && env.MANIFEST_DIRTY != null && env.MANIFEST_DIRTY != '0'
	run: curl -X POST -d '{}' ${{ env.NETLIFY_BUILD_HOOK }}
	env:
	NETLIFY_BUILD_HOOK: ${{ secrets.NETLIFY_BUILD_HOOK }}