Skip to content

Commit

Permalink
can't staple directly to binary
Browse files Browse the repository at this point in the history
  • Loading branch information
nathan-courtney-pieces committed Feb 12, 2024
1 parent 4255fab commit 7c5411f
Showing 1 changed file with 4 additions and 14 deletions.
18 changes: 4 additions & 14 deletions .github/workflows/release.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -48,29 +48,19 @@ jobs:
run: |
poetry run pyinstaller -c --onefile src/pieces/app.py --hidden-import=pydantic_core --add-data="src/pieces/data/applications.db:." --name=pieces
### Code signing the binary file
- name: Codesign Binary
run: |
codesign -s "Developer ID Application: Mesh Intelligent Technologies, Inc. (287L9TU9JL)" -i com.pieces.cli -o runtime --entitlements Release.entitlements --timestamp -f dist/pieces -v
- name: What is in the dist folder
run: |
ls -la
cd dist
ls -la
### Packing and Notarizing the app bundle for intel macs
### NOTE IMPORTANT @NATHAN ~ Currently not possible to staple a ticket to a binary directly see:
### https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/customizing_the_notarization_workflow
- name: Pack & Notarize Intel
run: |-
ditto -c -k --sequesterRsrc --keepParent "dist/pieces" dist/pieces-cli.zip
xcrun notarytool submit dist/pieces-cli.zip --password ${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }} --apple-id "[email protected]" --team-id "287L9TU9JL" --wait
xcrun stapler -v staple "dist/pieces"
ditto -c -k --sequesterRsrc --keepParent "dist/pieces" dist/pieces-cli.zip
- name: What is in the dist folder again
run: |
ls -la
cd dist
ls -la
# xcrun stapler staple "dist/pieces" - NOTE Currently Not Possible
### Uploading our builds to GitHub Artifacts
- name: Upload Artifacts
Expand Down

0 comments on commit 7c5411f

Please sign in to comment.