rework GHA for installer signing

.github/workflows/build-test-installer-release.yml

@@ -0,0 +1,116 @@
+name: Build and Run Tests. Build installer and create release on v tag
+
+on:
+  push:
+
+env:
+  # Path to the solution file relative to the root of the project.
+  SOLUTION_FILE_PATH: .
+
+  BUILD_CONFIGURATION: Release
+  PLATFORM: Win32
+
+jobs:
+  build:
+    runs-on: windows-2022
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Add MSBuild to PATH
+      uses: microsoft/setup-msbuild@v2
+
+      # TODO cache NuGet packages
+    - name: NuGet Restore
+      run: nuget restore ${{env.SOLUTION_FILE_PATH}}
+
+    - name: Build
+      working-directory: ${{env.GITHUB_WORKSPACE}}
+      run: msbuild /m /p:Configuration="${{env.BUILD_CONFIGURATION}}" ${{env.SOLUTION_FILE_PATH}}
+
+    - name: Setup VSTest and add to PATH
+      uses: darenm/[email protected]
+
+    - name: Run Unit Tests
+      working-directory: .\${{env.BUILD_CONFIGURATION}}
+      run: vstest.console.exe ElanUtilsTest.dll LiftUtilsTest.dll URIParserTest.dll WaveUtilsTest.dll
+
+    # This currently fails on github actions due to requiring the Speech Analyzer program to load up for scripting and testing
+    #- name: Run Integration Tests
+    #  working-directory: .\Release
+    #  run: vstest.console.exe SAScriptingTest.dll
+
+    - name: Upload Release/ for installer job
+      if: startsWith(github.ref, 'refs/tags/v')
+      uses: actions/upload-artifact@v4
+      with:
+        name: Release
+        path: Release/
+        retention-days: 3
+
+  build-installer:
+    name: Build installer
+    needs: build
+    if: startsWith(github.ref, 'refs/tags/v')
+    runs-on: windows-latest
+    outputs:
+      installer: ${{steps.getfilename.outputs.installer}}
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Download Release/
+        uses: actions/download-artifact@v4
+        with:
+          name: Release
+          path: Release/
+
+      # Copy iso639.txt to DistFiles
+      - name: Copy iso639.txt file
+        run: copy DistFiles/iso639.txt Release/
+
+      # Create Installer exe
+      - name: Run InnoSetup
+        working-directory: Install/
+        run: iscc SpeechAnalyzer.iss
+
+      - name: list files
+        run: dir Install/Output/
+
+      - name: get filename
+        id: getfilename
+        run: Write-Output ("installer="+(Get-ChildItem -Filter Install/Output/SpeechAnalyzerInstaller*.exe -Name)) >> $ENV:GITHUB_OUTPUT
+
+      - name: Upload installer
+        uses: actions/upload-artifact@v4
+        with:
+          name: SpeechAnalyzerInstaller
+          path: Install/Output/
+
+  sign-installer:
+    name: Sign installer
+    needs: build-installer
+    if: startsWith(github.ref, 'refs/tags/v')
+    uses: sillsdev/codesign/.github/workflows/sign.yml@v1
+    with:
+      target: ${{needs.build-installer.outputs.installer}}
+    secrets:
+      certificate: ${{ secrets.CODESIGN_LSDEVSECTIGOEV }}
+
+  create-release:
+    name: Create Release
+    needs: sign-installer
+    if: startsWith(github.ref, 'refs/tags/v')
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: SpeechAnalyzerInstaller.exe
+
+      - name: Create Release
+        uses: softprops/action-gh-release@v2
+        with:
+          files: SpeechAnalyzerInstaller.exe
+          body: |
+            Release for version ${{ github.ref }}
+          draft: true