use binskim #2

	name: iOS_CI

	on:
	push:
	branches:
	- main
	- rel-*
	- zhanyi/xnnios
	pull_request:
	branches:
	- main
	- rel-*
	workflow_dispatch:

	concurrency:
	group: ${{ github.workflow }}-${{ github.head_ref \|\| github.run_id }}
	cancel-in-progress: true

	env:
	python_version: 3.11
	xcode_version: 15.2

	jobs:
	ARM64:
	runs-on: macos-14

	timeout-minutes: 60

	steps:
	- uses: actions/setup-python@v5
	with:
	python-version: ${{ env.python_version }}

	- name: Verify ARM64 machine
	shell: python
	run: \|
	import platform
	assert platform.machine() == "arm64", "This job expects to be run on an ARM64 machine."

	- name: Use Xcode ${{ env.xcode_version }}
	shell: bash
	run: \|
	XCODE_DEVELOPER_DIR="/Applications/Xcode_${{ env.xcode_version }}.app/Contents/Developer"
	sudo xcode-select --switch "${XCODE_DEVELOPER_DIR}"

	- uses: actions/checkout@v4

	- name: Build and test
	shell: bash
	run: \|
	python ./tools/ci_build/build.py \
	--skip_submodule_sync \
	--build_dir build/iOS \
	--build_shared_lib \
	--use_coreml \
	--use_xnnpack \
	--ios \
	--apple_sysroot iphonesimulator \
	--osx_arch x86_64 \
	--apple_deploy_target=14.0 \
	--use_xcode \
	--config RelWithDebInfo \
	--build_apple_framework \
	--parallel --use_binskim_compliant_compile_flags

Provide feedback