name: 3. Create Certificates
run-name: Create Certificates
on:
  workflow_dispatch:

jobs:
  secrets:
    uses: ./.github/workflows/validate_secrets.yml
    secrets: inherit

  certificates:
    needs: secrets
    runs-on: macos-13
    steps:
      # Uncomment to manually select Xcode version if needed
      #- name: Select Xcode version
      #  run: "sudo xcode-select --switch /Applications/Xcode_14.1.app/Contents/Developer"
      
      # Checks-out the repo
      - name: Checkout Repo
        uses: actions/checkout@v3
        
      # Patch Fastlane Match to not print tables
      - name: Patch Match Tables
        run: find /usr/local/lib/ruby/gems -name table_printer.rb | xargs sed -i "" "/puts(Terminal::Table.new(params))/d"

      # Sync the GitHub runner clock with the Windows time server (workaround as suggested in https://github.com/actions/runner/issues/2996)
      - name: Sync clock
        run: sudo sntp -sS time.windows.com

      # Create or update certificates for app
      - name: Create Certificates
        run: fastlane certs
        env:
          TEAMID: ${{ secrets.TEAMID }}
          GH_PAT: ${{ secrets.GH_PAT }}
          MATCH_PASSWORD: ${{ secrets.MATCH_PASSWORD }}
          FASTLANE_KEY_ID: ${{ secrets.FASTLANE_KEY_ID }}
          FASTLANE_ISSUER_ID: ${{ secrets.FASTLANE_ISSUER_ID }}
          FASTLANE_KEY: ${{ secrets.FASTLANE_KEY }}