search

scala / scala3

The Scala 3 compiler, also known as Dotty.
https://dotty.epfl.ch
Apache License 2.0
5.79k stars 1.04k forks source link

Verify `.msi`/`.exe` launchers included in the release on the release pipeline #20379

Open Gedochao opened 4 months ago

Gedochao commented 4 months ago

The Scala CLI native package for Windows (.msi) is currently being verified with the following procedure: https://github.com/VirtusLab/scala-cli/blob/main/.github/release/windows-antimalware-analysis.md

The downside of it is that it has to be done manually, as well as the verification on Microsoft's side can take up to 30 days.

We need to find a way to expediate this process, and optimally to automate the submission process on the CI.

Gedochao commented 4 months ago

This currently blocks https://github.com/scala/scala3/issues/20378 and is necessary for https://github.com/scala/scala3/issues/20098

hamzaremmal commented 3 months ago

This issue itself is blocked due to Microsoft's lack of api. I don't think that we need it since we republish the same executable as the one we download from the last scala-cli release. This process will therefore have to be performed by the scala-cli team (unless we decide to build the executable in this repository)

@Gedochao should we close it ?

Gedochao commented 3 months ago

There's still one way to do this I'd like us to explore, but that might take a couple months before we see if it's feasible. I'll keep it open for some more, until I'm sure we won't find a way to do it. But yeah, for now we'll rely on the manual verification + workaround (using >30 day old *.exe launchers). I'll take it off the board for now, too.

Gedochao commented 3 months ago

cc @sjrd this is where we should track progress for it, when/if we have any (I know I'm being optimistic here 😅)