ShrinkSDK/ShrinkApp.Starter.Basic
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: trust bundled CAs during NuGet publish

Browse Source
This commit is contained in:
cneicy
2026-09-05 04:04:22 +08:00
parent cc1bbdfdc0
commit fcb2b2fbe6
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/publish-nuget.yml
+4
View File
@@ -17,6 +17,7 @@ jobs:
DOTNET_SYSTEM_GLOBALIZATION_INVARIANT: '1' DOTNET_SYSTEM_GLOBALIZATION_INVARIANT: '1'
DOTNET_CLI_TELEMETRY_OPTOUT: '1' DOTNET_CLI_TELEMETRY_OPTOUT: '1'
LD_LIBRARY_PATH: /opt/dotnet-libs/usr/lib/x86_64-linux-gnu LD_LIBRARY_PATH: /opt/dotnet-libs/usr/lib/x86_64-linux-gnu
SSL_CERT_FILE: /opt/ca-certificates.crt
steps: steps:
- name: Fetch exact tagged source - name: Fetch exact tagged source
env: env:
@@ -51,6 +52,9 @@ jobs:
set -euo pipefail set -euo pipefail
node --input-type=module <<'NODE' node --input-type=module <<'NODE'
import { writeFile } from 'node:fs/promises'; import { writeFile } from 'node:fs/promises';
import { rootCertificates } from 'node:tls';
await writeFile('/opt/ca-certificates.crt', rootCertificates.join('\n'));
const metadataResponse = await fetch('https://dotnetcli.blob.core.windows.net/dotnet/release-metadata/8.0/releases.json'); const metadataResponse = await fetch('https://dotnetcli.blob.core.windows.net/dotnet/release-metadata/8.0/releases.json');
if (!metadataResponse.ok) throw new Error(`Release metadata download failed: ${metadataResponse.status}`); if (!metadataResponse.ok) throw new Error(`Release metadata download failed: ${metadataResponse.status}`);