add a cleanup script to delete secrets

Author: sebsto

.github/workflows/ContinuousIntegration.yml

@@ -33,3 +33,14 @@ jobs:
       run: code/ci_actions/04_unit_tests.sh
     - name: UITest
       run: code/ci_actions/05_ui_tests.sh
+
+  cleanup:
+
+    needs: test
+    
+    runs-on: self-hosted
+
+    steps:
+
+    - name: cleanup
+      run: code/ci_actions/06_cleanup.sh

code/ci_actions/06_cleanup.sh

@@ -0,0 +1,14 @@
+#!/bin/sh 
+
+# delete build secrets 
+echo "Delete certificates directory"
+rm -rf ~/certificates 
+
+KEYCHAIN_NAME=dev.keychain
+if [ -f $HOME/Library/Keychains/"${KEYCHAIN_NAME}"-db ]; then
+    echo "Deleting old ${KEYCHAIN_NAME} keychain"
+    security delete-keychain "${KEYCHAIN_NAME}"
+fi
+
+# no need to delete the system keychain
+# it only contains the Apple WWDR public certificate