Use code signing in CI tests workflows (#3125)

Task/Issue URL: https://app.asana.com/0/1203301625297703/1208100078742782/f Description: This change enables code signing in CI workflows using Developer ID Application certificate.
duckduckgo · Aug 21, 2024 · 6c87822 · 6c87822
1 parent d9c39df
commit 6c87822
Show file tree

Hide file tree

Showing 26 changed files with 338 additions and 96 deletions.
diff --git a/.github/actions/install-certs-and-profiles/action.yml b/.github/actions/install-certs-and-profiles/action.yml
@@ -10,10 +10,16 @@ inputs:
   KEYCHAIN_PASSWORD:
     required: true
     type: string
-  REVIEW_PROVISION_PROFILE_BASE64:
+  APPSTORE_CI_PROVISION_PROFILE_BASE64:
     required: true
     type: string
-  RELEASE_PROVISION_PROFILE_BASE64:
+  CI_PROVISION_PROFILE_BASE64:
+    required: true
+    type: string
+  DBP_AGENT_APPSTORE_CI_PROVISION_PROFILE_BASE64:
+    required: true
+    type: string
+  DBP_AGENT_CI_PROVISION_PROFILE_BASE64:
     required: true
     type: string
   DBP_AGENT_RELEASE_PROVISION_PROFILE_BASE64:
@@ -22,10 +28,10 @@ inputs:
   DBP_AGENT_REVIEW_PROVISION_PROFILE_BASE64:
     required: true
     type: string
-  NETP_SYSEX_RELEASE_PROVISION_PROFILE_BASE64:
+  INTEGRATION_TESTS_APPSTORE_CI_PROVISION_PROFILE_BASE64:
     required: true
     type: string
-  NETP_SYSEX_REVIEW_PROVISION_PROFILE_BASE64:
+  INTEGRATION_TESTS_CI_PROVISION_PROFILE_BASE64:
     required: true
     type: string
   NETP_AGENT_RELEASE_PROVISION_PROFILE_BASE64:
@@ -34,12 +40,45 @@ inputs:
   NETP_AGENT_REVIEW_PROVISION_PROFILE_BASE64:
     required: true
     type: string
+  NETP_NOTIFICATIONS_CI_PROVISION_PROFILE_BASE64:
+    required: true
+    type: string
   NETP_NOTIFICATIONS_RELEASE_PROVISION_PROFILE_BASE64:
     required: true
     type: string
   NETP_NOTIFICATIONS_REVIEW_PROVISION_PROFILE_BASE64:
     required: true
     type: string
+  NETP_SYSEX_RELEASE_PROVISION_PROFILE_BASE64:
+    required: true
+    type: string
+  NETP_SYSEX_REVIEW_PROVISION_PROFILE_BASE64:
+    required: true
+    type: string
+  RELEASE_PROVISION_PROFILE_BASE64:
+    required: true
+    type: string
+  REVIEW_PROVISION_PROFILE_BASE64:
+    required: true
+    type: string
+  UNIT_TESTS_APPSTORE_CI_PROVISION_PROFILE_BASE64:
+    required: true
+    type: string
+  UNIT_TESTS_CI_PROVISION_PROFILE_BASE64:
+    required: true
+    type: string
+  VPN_APPEX_APPSTORE_CI_PROVISION_PROFILE_BASE64:
+    required: true
+    type: string
+  VPN_APP_APPSTORE_CI_PROVISION_PROFILE_BASE64:
+    required: true
+    type: string
+  VPN_APP_CI_PROVISION_PROFILE_BASE64:
+    required: true
+    type: string
+  VPN_PROXY_EXTENSION_CI_PROVISION_PROFILE_BASE64:
+    required: true
+    type: string
   access-token:
     description: "Asana access token"
     required: true
@@ -59,29 +98,55 @@ runs:
         # create variables
         CERTIFICATE_PATH=$RUNNER_TEMP/build_certificate.p12
         KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain-db
-        REVIEW_PP_PATH=$RUNNER_TEMP/review_pp.provisionprofile
-        RELEASE_PP_PATH=$RUNNER_TEMP/release_pp.provisionprofile
+        APPSTORE_CI_PP_PATH=$RUNNER_TEMP/appstore_ci.provisionprofile
+        CI_PP_PATH=$RUNNER_TEMP/ci.provisionprofile
+        DBP_AGENT_APPSTORE_CI_PP_PATH=$RUNNER_TEMP/dbp_agent_appstore_ci.provisionprofile
+        DBP_AGENT_CI_PP_PATH=$RUNNER_TEMP/dbp_agent_ci.provisionprofile
         DBP_AGENT_RELEASE_PP_PATH=$RUNNER_TEMP/dbp_agent_release_pp.provisionprofile
         DBP_AGENT_REVIEW_PP_PATH=$RUNNER_TEMP/dbp_agent_review_pp.provisionprofile
-        NETP_SYSEX_RELEASE_PP_PATH=$RUNNER_TEMP/netp_sysex_release_pp.provisionprofile
-        NETP_SYSEX_REVIEW_PP_PATH=$RUNNER_TEMP/netp_sysex_review_pp.provisionprofile
+        INTEGRATION_TESTS_APPSTORE_CI_PP_PATH=$RUNNER_TEMP/integration_tests_appstore_ci.provisionprofile
+        INTEGRATION_TESTS_CI_PP_PATH=$RUNNER_TEMP/integration_tests_ci.provisionprofile
         NETP_AGENT_RELEASE_PP_PATH=$RUNNER_TEMP/netp_agent_release_pp.provisionprofile
         NETP_AGENT_REVIEW_PP_PATH=$RUNNER_TEMP/netp_agent_review_pp.provisionprofile
+        NETP_NOTIFICATIONS_CI_PP_PATH=$RUNNER_TEMP/netp_notifications_ci.provisionprofile
         NETP_NOTIFICATIONS_RELEASE_PP_PATH=$RUNNER_TEMP/netp_notifications_release_pp.provisionprofile
         NETP_NOTIFICATIONS_REVIEW_PP_PATH=$RUNNER_TEMP/netp_notifications_review_pp.provisionprofile
+        NETP_SYSEX_RELEASE_PP_PATH=$RUNNER_TEMP/netp_sysex_release_pp.provisionprofile
+        NETP_SYSEX_REVIEW_PP_PATH=$RUNNER_TEMP/netp_sysex_review_pp.provisionprofile
+        RELEASE_PP_PATH=$RUNNER_TEMP/release_pp.provisionprofile
+        REVIEW_PP_PATH=$RUNNER_TEMP/review_pp.provisionprofile
+        UNIT_TESTS_APPSTORE_CI_PP_PATH=$RUNNER_TEMP/unit_tests_appstore_ci.provisionprofile
+        UNIT_TESTS_CI_PP_PATH=$RUNNER_TEMP/unit_tests_ci.provisionprofile
+        VPN_APPEX_APPSTORE_CI_PP_PATH=$RUNNER_TEMP/vpn_appex_appstore_ci.provisionprofile
+        VPN_APP_APPSTORE_CI_PP_PATH=$RUNNER_TEMP/vpn_app_appstore_ci.provisionprofile
+        VPN_APP_CI_PP_PATH=$RUNNER_TEMP/vpn_app_ci.provisionprofile
+        VPN_PROXY_EXTENSION_CI_PP_PATH=$RUNNER_TEMP/vpn_proxy_extension_ci.provisionprofile
 
         # import certificate from secrets
         echo -n "${{ inputs.BUILD_CERTIFICATE_BASE64 }}" | base64 --decode -o $CERTIFICATE_PATH
-        echo -n "${{ inputs.REVIEW_PROVISION_PROFILE_BASE64 }}" | base64 --decode -o $REVIEW_PP_PATH
-        echo -n "${{ inputs.RELEASE_PROVISION_PROFILE_BASE64 }}" | base64 --decode -o $RELEASE_PP_PATH
+        echo -n "${{ inputs.APPSTORE_CI_PROVISION_PROFILE_BASE64 }}" | base64 --decode -o $APPSTORE_CI_PP_PATH
+        echo -n "${{ inputs.CI_PROVISION_PROFILE_BASE64 }}" | base64 --decode -o $CI_PP_PATH
+        echo -n "${{ inputs.DBP_AGENT_APPSTORE_CI_PROVISION_PROFILE_BASE64 }}" | base64 --decode -o $DBP_AGENT_APPSTORE_CI_PP_PATH
+        echo -n "${{ inputs.DBP_AGENT_CI_PROVISION_PROFILE_BASE64 }}" | base64 --decode -o $DBP_AGENT_CI_PP_PATH
         echo -n "${{ inputs.DBP_AGENT_RELEASE_PROVISION_PROFILE_BASE64 }}" | base64 --decode -o $DBP_AGENT_RELEASE_PP_PATH
         echo -n "${{ inputs.DBP_AGENT_REVIEW_PROVISION_PROFILE_BASE64 }}" | base64 --decode -o $DBP_AGENT_REVIEW_PP_PATH
-        echo -n "${{ inputs.NETP_SYSEX_RELEASE_PROVISION_PROFILE_BASE64 }}" | base64 --decode -o $NETP_SYSEX_RELEASE_PP_PATH
-        echo -n "${{ inputs.NETP_SYSEX_REVIEW_PROVISION_PROFILE_BASE64 }}" | base64 --decode -o $NETP_SYSEX_REVIEW_PP_PATH
+        echo -n "${{ inputs.INTEGRATION_TESTS_APPSTORE_CI_PROVISION_PROFILE_BASE64 }}" | base64 --decode -o $INTEGRATION_TESTS_APPSTORE_CI_PP_PATH
+        echo -n "${{ inputs.INTEGRATION_TESTS_CI_PROVISION_PROFILE_BASE64 }}" | base64 --decode -o $INTEGRATION_TESTS_CI_PP_PATH
         echo -n "${{ inputs.NETP_AGENT_RELEASE_PROVISION_PROFILE_BASE64 }}" | base64 --decode -o $NETP_AGENT_RELEASE_PP_PATH
         echo -n "${{ inputs.NETP_AGENT_REVIEW_PROVISION_PROFILE_BASE64 }}" | base64 --decode -o $NETP_AGENT_REVIEW_PP_PATH
+        echo -n "${{ inputs.NETP_NOTIFICATIONS_CI_PROVISION_PROFILE_BASE64 }}" | base64 --decode -o $NETP_NOTIFICATIONS_CI_PP_PATH
         echo -n "${{ inputs.NETP_NOTIFICATIONS_RELEASE_PROVISION_PROFILE_BASE64 }}" | base64 --decode -o $NETP_NOTIFICATIONS_RELEASE_PP_PATH
         echo -n "${{ inputs.NETP_NOTIFICATIONS_REVIEW_PROVISION_PROFILE_BASE64 }}" | base64 --decode -o $NETP_NOTIFICATIONS_REVIEW_PP_PATH
+        echo -n "${{ inputs.NETP_SYSEX_RELEASE_PROVISION_PROFILE_BASE64 }}" | base64 --decode -o $NETP_SYSEX_RELEASE_PP_PATH
+        echo -n "${{ inputs.NETP_SYSEX_REVIEW_PROVISION_PROFILE_BASE64 }}" | base64 --decode -o $NETP_SYSEX_REVIEW_PP_PATH
+        echo -n "${{ inputs.RELEASE_PROVISION_PROFILE_BASE64 }}" | base64 --decode -o $RELEASE_PP_PATH
+        echo -n "${{ inputs.REVIEW_PROVISION_PROFILE_BASE64 }}" | base64 --decode -o $REVIEW_PP_PATH
+        echo -n "${{ inputs.UNIT_TESTS_APPSTORE_CI_PROVISION_PROFILE_BASE64 }}" | base64 --decode -o $UNIT_TESTS_APPSTORE_CI_PP_PATH
+        echo -n "${{ inputs.UNIT_TESTS_CI_PROVISION_PROFILE_BASE64 }}" | base64 --decode -o $UNIT_TESTS_CI_PP_PATH
+        echo -n "${{ inputs.VPN_APPEX_APPSTORE_CI_PROVISION_PROFILE_BASE64 }}" | base64 --decode -o $VPN_APPEX_APPSTORE_CI_PP_PATH
+        echo -n "${{ inputs.VPN_APP_APPSTORE_CI_PROVISION_PROFILE_BASE64 }}" | base64 --decode -o $VPN_APP_APPSTORE_CI_PP_PATH
+        echo -n "${{ inputs.VPN_APP_CI_PROVISION_PROFILE_BASE64 }}" | base64 --decode -o $VPN_APP_CI_PP_PATH
+        echo -n "${{ inputs.VPN_PROXY_EXTENSION_CI_PROVISION_PROFILE_BASE64 }}" | base64 --decode -o $VPN_PROXY_EXTENSION_CI_PP_PATH
 
         # create temporary keychain
         security create-keychain -p "${{ inputs.KEYCHAIN_PASSWORD }}" $KEYCHAIN_PATH
@@ -95,15 +160,28 @@ runs:
 
         # apply provisioning profile
         mkdir -p ~/Library/MobileDevice/Provisioning\ Profiles
-        cp $REVIEW_PP_PATH \
-            $RELEASE_PP_PATH \
+        cp $APPSTORE_CI_PP_PATH \
+            $CI_PP_PATH \
+            $DBP_AGENT_APPSTORE_CI_PP_PATH \
+            $DBP_AGENT_CI_PP_PATH \
             $DBP_AGENT_RELEASE_PP_PATH \
             $DBP_AGENT_REVIEW_PP_PATH \
-            $NETP_SYSEX_RELEASE_PP_PATH \
-            $NETP_SYSEX_REVIEW_PP_PATH \
+            $INTEGRATION_TESTS_APPSTORE_CI_PP_PATH \
+            $INTEGRATION_TESTS_CI_PP_PATH \
             $NETP_AGENT_RELEASE_PP_PATH \
             $NETP_AGENT_REVIEW_PP_PATH \
+            $NETP_NOTIFICATIONS_CI_PP_PATH \
             $NETP_NOTIFICATIONS_RELEASE_PP_PATH \
             $NETP_NOTIFICATIONS_REVIEW_PP_PATH \
+            $NETP_SYSEX_RELEASE_PP_PATH \
+            $NETP_SYSEX_REVIEW_PP_PATH \
+            $RELEASE_PP_PATH \
+            $UNIT_TESTS_APPSTORE_CI_PP_PATH \
+            $UNIT_TESTS_CI_PP_PATH \
+            $VPN_APPEX_APPSTORE_CI_PP_PATH \
+            $VPN_APP_APPSTORE_CI_PP_PATH \
+            $VPN_APP_CI_PP_PATH \
+            $VPN_PROXY_EXTENSION_CI_PP_PATH \
+            $REVIEW_PP_PATH \
             ~/Library/MobileDevice/Provisioning\ Profiles
       shell: bash
diff --git a/.github/workflows/build_notarized.yml b/.github/workflows/build_notarized.yml
@@ -47,26 +47,52 @@ on:
         required: true
       KEYCHAIN_PASSWORD:
         required: true
-      REVIEW_PROVISION_PROFILE_BASE64:
+      APPSTORE_CI_PROVISION_PROFILE_BASE64:
         required: true
-      RELEASE_PROVISION_PROFILE_BASE64:
+      CI_PROVISION_PROFILE_BASE64:
+        required: true
+      DBP_AGENT_APPSTORE_CI_PROVISION_PROFILE_BASE64:
+        required: true
+      DBP_AGENT_CI_PROVISION_PROFILE_BASE64:
         required: true
       DBP_AGENT_RELEASE_PROVISION_PROFILE_BASE64:
         required: true
       DBP_AGENT_REVIEW_PROVISION_PROFILE_BASE64:
         required: true
-      NETP_SYSEX_RELEASE_PROVISION_PROFILE_BASE64_V2:
+      INTEGRATION_TESTS_APPSTORE_CI_PROVISION_PROFILE_BASE64:
         required: true
-      NETP_SYSEX_REVIEW_PROVISION_PROFILE_BASE64_V2:
+      INTEGRATION_TESTS_CI_PROVISION_PROFILE_BASE64:
         required: true
       NETP_AGENT_RELEASE_PROVISION_PROFILE_BASE64_V2:
         required: true
       NETP_AGENT_REVIEW_PROVISION_PROFILE_BASE64_V2:
         required: true
+      NETP_NOTIFICATIONS_CI_PROVISION_PROFILE_BASE64:
+        required: true
       NETP_NOTIFICATIONS_RELEASE_PROVISION_PROFILE_BASE64:
         required: true
       NETP_NOTIFICATIONS_REVIEW_PROVISION_PROFILE_BASE64:
         required: true
+      NETP_SYSEX_RELEASE_PROVISION_PROFILE_BASE64_V2:
+        required: true
+      NETP_SYSEX_REVIEW_PROVISION_PROFILE_BASE64_V2:
+        required: true
+      RELEASE_PROVISION_PROFILE_BASE64:
+        required: true
+      REVIEW_PROVISION_PROFILE_BASE64:
+        required: true
+      UNIT_TESTS_APPSTORE_CI_PROVISION_PROFILE_BASE64:
+        required: true
+      UNIT_TESTS_CI_PROVISION_PROFILE_BASE64:
+        required: true
+      VPN_APPEX_APPSTORE_CI_PROVISION_PROFILE_BASE64:
+        required: true
+      VPN_APP_APPSTORE_CI_PROVISION_PROFILE_BASE64:
+        required: true
+      VPN_APP_CI_PROVISION_PROFILE_BASE64:
+        required: true
+      VPN_PROXY_EXTENSION_CI_PROVISION_PROFILE_BASE64:
+        required: true
       APPLE_API_KEY_BASE64:
         required: true
       APPLE_API_KEY_ID:
@@ -132,16 +158,29 @@ jobs:
         BUILD_CERTIFICATE_BASE64: ${{ secrets.BUILD_CERTIFICATE_BASE64 }}
         P12_PASSWORD: ${{ secrets.P12_PASSWORD }}
         KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }}
-        REVIEW_PROVISION_PROFILE_BASE64: ${{ secrets.REVIEW_PROVISION_PROFILE_BASE64 }}
-        RELEASE_PROVISION_PROFILE_BASE64: ${{ secrets.RELEASE_PROVISION_PROFILE_BASE64 }}
+        APPSTORE_CI_PROVISION_PROFILE_BASE64: ${{ secrets.APPSTORE_CI_PROVISION_PROFILE_BASE64 }}
+        CI_PROVISION_PROFILE_BASE64: ${{ secrets.CI_PROVISION_PROFILE_BASE64 }}
+        DBP_AGENT_APPSTORE_CI_PROVISION_PROFILE_BASE64: ${{ secrets.DBP_AGENT_APPSTORE_CI_PROVISION_PROFILE_BASE64 }}
+        DBP_AGENT_CI_PROVISION_PROFILE_BASE64: ${{ secrets.DBP_AGENT_CI_PROVISION_PROFILE_BASE64 }}
         DBP_AGENT_RELEASE_PROVISION_PROFILE_BASE64: ${{ secrets.DBP_AGENT_RELEASE_PROVISION_PROFILE_BASE64 }}
         DBP_AGENT_REVIEW_PROVISION_PROFILE_BASE64: ${{ secrets.DBP_AGENT_REVIEW_PROVISION_PROFILE_BASE64 }}
-        NETP_SYSEX_RELEASE_PROVISION_PROFILE_BASE64: ${{ secrets.NETP_SYSEX_RELEASE_PROVISION_PROFILE_BASE64_V2 }}
-        NETP_SYSEX_REVIEW_PROVISION_PROFILE_BASE64: ${{ secrets.NETP_SYSEX_REVIEW_PROVISION_PROFILE_BASE64_V2 }}
+        INTEGRATION_TESTS_APPSTORE_CI_PROVISION_PROFILE_BASE64: ${{ secrets.INTEGRATION_TESTS_APPSTORE_CI_PROVISION_PROFILE_BASE64 }}
+        INTEGRATION_TESTS_CI_PROVISION_PROFILE_BASE64: ${{ secrets.INTEGRATION_TESTS_CI_PROVISION_PROFILE_BASE64 }}
         NETP_AGENT_RELEASE_PROVISION_PROFILE_BASE64: ${{ secrets.NETP_AGENT_RELEASE_PROVISION_PROFILE_BASE64_V2 }}
         NETP_AGENT_REVIEW_PROVISION_PROFILE_BASE64: ${{ secrets.NETP_AGENT_REVIEW_PROVISION_PROFILE_BASE64_V2 }}
+        NETP_NOTIFICATIONS_CI_PROVISION_PROFILE_BASE64: ${{ secrets.NETP_NOTIFICATIONS_CI_PROVISION_PROFILE_BASE64 }}
         NETP_NOTIFICATIONS_RELEASE_PROVISION_PROFILE_BASE64: ${{ secrets.NETP_NOTIFICATIONS_RELEASE_PROVISION_PROFILE_BASE64 }}
         NETP_NOTIFICATIONS_REVIEW_PROVISION_PROFILE_BASE64: ${{ secrets.NETP_NOTIFICATIONS_REVIEW_PROVISION_PROFILE_BASE64 }}
+        NETP_SYSEX_RELEASE_PROVISION_PROFILE_BASE64: ${{ secrets.NETP_SYSEX_RELEASE_PROVISION_PROFILE_BASE64_V2 }}
+        NETP_SYSEX_REVIEW_PROVISION_PROFILE_BASE64: ${{ secrets.NETP_SYSEX_REVIEW_PROVISION_PROFILE_BASE64_V2 }}
+        RELEASE_PROVISION_PROFILE_BASE64: ${{ secrets.RELEASE_PROVISION_PROFILE_BASE64 }}
+        REVIEW_PROVISION_PROFILE_BASE64: ${{ secrets.REVIEW_PROVISION_PROFILE_BASE64 }}
+        UNIT_TESTS_APPSTORE_CI_PROVISION_PROFILE_BASE64: ${{ secrets.UNIT_TESTS_APPSTORE_CI_PROVISION_PROFILE_BASE64 }}
+        UNIT_TESTS_CI_PROVISION_PROFILE_BASE64: ${{ secrets.UNIT_TESTS_CI_PROVISION_PROFILE_BASE64 }}
+        VPN_APPEX_APPSTORE_CI_PROVISION_PROFILE_BASE64: ${{ secrets.VPN_APPEX_APPSTORE_CI_PROVISION_PROFILE_BASE64 }}
+        VPN_APP_APPSTORE_CI_PROVISION_PROFILE_BASE64: ${{ secrets.VPN_APP_APPSTORE_CI_PROVISION_PROFILE_BASE64 }}
+        VPN_APP_CI_PROVISION_PROFILE_BASE64: ${{ secrets.VPN_APP_CI_PROVISION_PROFILE_BASE64 }}
+        VPN_PROXY_EXTENSION_CI_PROVISION_PROFILE_BASE64: ${{ secrets.VPN_PROXY_EXTENSION_CI_PROVISION_PROFILE_BASE64 }}
 
     - name: Select Xcode
       run: sudo xcode-select -s /Applications/Xcode_$(<.xcode-version).app/Contents/Developer

diff --git a/.github/workflows/create_variant.yml b/.github/workflows/create_variant.yml
@@ -26,26 +26,52 @@ on:
         required: true
       KEYCHAIN_PASSWORD:
         required: true
-      REVIEW_PROVISION_PROFILE_BASE64:
+      APPSTORE_CI_PROVISION_PROFILE_BASE64:
         required: true
-      RELEASE_PROVISION_PROFILE_BASE64:
+      CI_PROVISION_PROFILE_BASE64:
+        required: true
+      DBP_AGENT_APPSTORE_CI_PROVISION_PROFILE_BASE64:
+        required: true
+      DBP_AGENT_CI_PROVISION_PROFILE_BASE64:
         required: true
       DBP_AGENT_RELEASE_PROVISION_PROFILE_BASE64:
         required: true
       DBP_AGENT_REVIEW_PROVISION_PROFILE_BASE64:
         required: true
-      NETP_SYSEX_RELEASE_PROVISION_PROFILE_BASE64_V2:
+      INTEGRATION_TESTS_APPSTORE_CI_PROVISION_PROFILE_BASE64:
         required: true
-      NETP_SYSEX_REVIEW_PROVISION_PROFILE_BASE64_V2:
+      INTEGRATION_TESTS_CI_PROVISION_PROFILE_BASE64:
         required: true
       NETP_AGENT_RELEASE_PROVISION_PROFILE_BASE64_V2:
         required: true
       NETP_AGENT_REVIEW_PROVISION_PROFILE_BASE64_V2:
         required: true
+      NETP_NOTIFICATIONS_CI_PROVISION_PROFILE_BASE64:
+        required: true
       NETP_NOTIFICATIONS_RELEASE_PROVISION_PROFILE_BASE64:
         required: true
       NETP_NOTIFICATIONS_REVIEW_PROVISION_PROFILE_BASE64:
         required: true
+      NETP_SYSEX_RELEASE_PROVISION_PROFILE_BASE64_V2:
+        required: true
+      NETP_SYSEX_REVIEW_PROVISION_PROFILE_BASE64_V2:
+        required: true
+      RELEASE_PROVISION_PROFILE_BASE64:
+        required: true
+      REVIEW_PROVISION_PROFILE_BASE64:
+        required: true
+      UNIT_TESTS_APPSTORE_CI_PROVISION_PROFILE_BASE64:
+        required: true
+      UNIT_TESTS_CI_PROVISION_PROFILE_BASE64:
+        required: true
+      VPN_APPEX_APPSTORE_CI_PROVISION_PROFILE_BASE64:
+        required: true
+      VPN_APP_APPSTORE_CI_PROVISION_PROFILE_BASE64:
+        required: true
+      VPN_APP_CI_PROVISION_PROFILE_BASE64:
+        required: true
+      VPN_PROXY_EXTENSION_CI_PROVISION_PROFILE_BASE64:
+        required: true
       APPLE_API_KEY_BASE64:
         required: true
       APPLE_API_KEY_ID:
@@ -118,16 +144,29 @@ jobs:
         BUILD_CERTIFICATE_BASE64: ${{ secrets.BUILD_CERTIFICATE_BASE64 }}
         P12_PASSWORD: ${{ secrets.P12_PASSWORD }}
         KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }}
-        REVIEW_PROVISION_PROFILE_BASE64: ${{ secrets.REVIEW_PROVISION_PROFILE_BASE64 }}
-        RELEASE_PROVISION_PROFILE_BASE64: ${{ secrets.RELEASE_PROVISION_PROFILE_BASE64 }}
+        APPSTORE_CI_PROVISION_PROFILE_BASE64: ${{ secrets.APPSTORE_CI_PROVISION_PROFILE_BASE64 }}
+        CI_PROVISION_PROFILE_BASE64: ${{ secrets.CI_PROVISION_PROFILE_BASE64 }}
+        DBP_AGENT_APPSTORE_CI_PROVISION_PROFILE_BASE64: ${{ secrets.DBP_AGENT_APPSTORE_CI_PROVISION_PROFILE_BASE64 }}
+        DBP_AGENT_CI_PROVISION_PROFILE_BASE64: ${{ secrets.DBP_AGENT_CI_PROVISION_PROFILE_BASE64 }}
         DBP_AGENT_RELEASE_PROVISION_PROFILE_BASE64: ${{ secrets.DBP_AGENT_RELEASE_PROVISION_PROFILE_BASE64 }}
         DBP_AGENT_REVIEW_PROVISION_PROFILE_BASE64: ${{ secrets.DBP_AGENT_REVIEW_PROVISION_PROFILE_BASE64 }}
-        NETP_SYSEX_RELEASE_PROVISION_PROFILE_BASE64: ${{ secrets.NETP_SYSEX_RELEASE_PROVISION_PROFILE_BASE64_V2 }}
-        NETP_SYSEX_REVIEW_PROVISION_PROFILE_BASE64: ${{ secrets.NETP_SYSEX_REVIEW_PROVISION_PROFILE_BASE64_V2 }}
+        INTEGRATION_TESTS_APPSTORE_CI_PROVISION_PROFILE_BASE64: ${{ secrets.INTEGRATION_TESTS_APPSTORE_CI_PROVISION_PROFILE_BASE64 }}
+        INTEGRATION_TESTS_CI_PROVISION_PROFILE_BASE64: ${{ secrets.INTEGRATION_TESTS_CI_PROVISION_PROFILE_BASE64 }}
         NETP_AGENT_RELEASE_PROVISION_PROFILE_BASE64: ${{ secrets.NETP_AGENT_RELEASE_PROVISION_PROFILE_BASE64_V2 }}
         NETP_AGENT_REVIEW_PROVISION_PROFILE_BASE64: ${{ secrets.NETP_AGENT_REVIEW_PROVISION_PROFILE_BASE64_V2 }}
+        NETP_NOTIFICATIONS_CI_PROVISION_PROFILE_BASE64: ${{ secrets.NETP_NOTIFICATIONS_CI_PROVISION_PROFILE_BASE64 }}
         NETP_NOTIFICATIONS_RELEASE_PROVISION_PROFILE_BASE64: ${{ secrets.NETP_NOTIFICATIONS_RELEASE_PROVISION_PROFILE_BASE64 }}
         NETP_NOTIFICATIONS_REVIEW_PROVISION_PROFILE_BASE64: ${{ secrets.NETP_NOTIFICATIONS_REVIEW_PROVISION_PROFILE_BASE64 }}
+        NETP_SYSEX_RELEASE_PROVISION_PROFILE_BASE64: ${{ secrets.NETP_SYSEX_RELEASE_PROVISION_PROFILE_BASE64_V2 }}
+        NETP_SYSEX_REVIEW_PROVISION_PROFILE_BASE64: ${{ secrets.NETP_SYSEX_REVIEW_PROVISION_PROFILE_BASE64_V2 }}
+        RELEASE_PROVISION_PROFILE_BASE64: ${{ secrets.RELEASE_PROVISION_PROFILE_BASE64 }}
+        REVIEW_PROVISION_PROFILE_BASE64: ${{ secrets.REVIEW_PROVISION_PROFILE_BASE64 }}
+        UNIT_TESTS_APPSTORE_CI_PROVISION_PROFILE_BASE64: ${{ secrets.UNIT_TESTS_APPSTORE_CI_PROVISION_PROFILE_BASE64 }}
+        UNIT_TESTS_CI_PROVISION_PROFILE_BASE64: ${{ secrets.UNIT_TESTS_CI_PROVISION_PROFILE_BASE64 }}
+        VPN_APPEX_APPSTORE_CI_PROVISION_PROFILE_BASE64: ${{ secrets.VPN_APPEX_APPSTORE_CI_PROVISION_PROFILE_BASE64 }}
+        VPN_APP_APPSTORE_CI_PROVISION_PROFILE_BASE64: ${{ secrets.VPN_APP_APPSTORE_CI_PROVISION_PROFILE_BASE64 }}
+        VPN_APP_CI_PROVISION_PROFILE_BASE64: ${{ secrets.VPN_APP_CI_PROVISION_PROFILE_BASE64 }}
+        VPN_PROXY_EXTENSION_CI_PROVISION_PROFILE_BASE64: ${{ secrets.VPN_PROXY_EXTENSION_CI_PROVISION_PROFILE_BASE64 }}
 
     - name: Set up variant
       working-directory: ${{ github.workspace }}/dmg