Skip to content

Commit

Permalink
fixup! fixup! [GHA] Fix signing step for macos ci release ci release
Browse files Browse the repository at this point in the history
ci release
  • Loading branch information
RoiArthurB committed Feb 23, 2024
1 parent d627503 commit a9e0cde
Showing 1 changed file with 3 additions and 6 deletions.
9 changes: 3 additions & 6 deletions .github/workflows/travis-packaging-macos.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -79,7 +79,6 @@ jobs:
MACOS_CERTIFICATE_PWD: ${{ secrets.MACOS_CERTIFICATE_PWD }}
MACOS_KEYCHAIN_PWD: ${{ secrets.MACOS_KEYCHAIN_PWD }}
run: |
mv ./artifacts/entitlements.plist ${{ github.workspace }}
# Prepare the keychain - Based on https://localazy.com/blog/how-to-automatically-sign-macos-apps-using-github-actions
security create-keychain -p "$MACOS_KEYCHAIN_PWD" build.keychain
security default-keychain -s build.keychain
Expand All @@ -96,17 +95,15 @@ jobs:
# Variables
MACOS_DEV_ID: ${{ secrets.MACOS_DEV_ID }}
MACOS_KEYCHAIN_PWD: ${{ secrets.MACOS_KEYCHAIN_PWD }}
IS_WITH_JDK: ${{ secrets.IS_WITH_JDK }}
WORKSPACE_PATH: ${{ github.workspace }}
run: |
# Unlock
security unlock-keychain -p "$MACOS_KEYCHAIN_PWD" build.keychain
unzip -q ${{ github.workspace }}/artifacts/${{ matrix.zipName }}.zip -d . && rm ${{ github.workspace }}/artifacts/*.zip
# Sign everything inside app
bash ${{ github.workspace }}/artifacts/mac-sign.sh
plutil -convert xml1 ${{ github.workspace }}/entitlements.plist && plutil -lint ${{ github.workspace }}/entitlements.plist
codesign --entitlements "$WORKSPACE_PATH/entitlements.plist" --timestamp --options=runtime --force -s "$MACOS_DEV_ID" -v ./Gama.app/Contents/MacOS/Gama
plutil -convert xml1 ./artifacts/entitlements.plist && plutil -lint ./artifacts/entitlements.plist
codesign --entitlements "./artifacts/entitlements.plist" --timestamp --options=runtime --force -s "$MACOS_DEV_ID" -v ./Gama.app/Contents/MacOS/Gama
- name: Packaging signed Application w/o JDK
shell: bash
env:
Expand Down

0 comments on commit a9e0cde

Please sign in to comment.