From 337c381f3626abd2981cffd4d82a6c293a8111b9 Mon Sep 17 00:00:00 2001
From: CREDO23 <thierrybakera12@gmail.com>
Date: Fri, 20 Mar 2026 15:19:38 +0200
Subject: [PATCH] ci(desktop): add package & publish step with platform matrix
 and permissions

---
 .github/workflows/desktop-release.yml | 17 ++++++++++++++++-
 1 file changed, 16 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/desktop-release.yml b/.github/workflows/desktop-release.yml
index 11b65d574..41e802588 100644
--- a/.github/workflows/desktop-release.yml
+++ b/.github/workflows/desktop-release.yml
@@ -5,12 +5,21 @@ on:
     tags:
       - 'v*'
 
+permissions:
+  contents: write
+
 jobs:
   build:
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
-        os: [macos-latest, ubuntu-latest, windows-latest]
+        include:
+          - os: macos-latest
+            platform: --mac
+          - os: ubuntu-latest
+            platform: --linux
+          - os: windows-latest
+            platform: --win
 
     steps:
       - name: Checkout
@@ -40,3 +49,9 @@ jobs:
       - name: Build Electron
         run: pnpm build
         working-directory: surfsense_desktop
+
+      - name: Package & Publish
+        run: pnpm exec electron-builder ${{ matrix.platform }} --config electron-builder.yml --publish always
+        working-directory: surfsense_desktop
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}