Update build-macos.yml

This commit is contained in:
Anirudh Sevugan 2025-08-07 20:07:13 -05:00 committed by GitHub
parent ef6fdfb4a4
commit a7a5ffe633
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -29,10 +29,10 @@ jobs:
security list-keychains -s build.keychain login.keychain-db security list-keychains -s build.keychain login.keychain-db
security unlock-keychain -p "" build.keychain security unlock-keychain -p "" build.keychain
- name: Check secret presence - name: Check secrets presence
env: env:
CERT_P12_BASE64: ${{ secrets.MAC_CERTIFICATE_P12 }} CERT_P12_RAW: ${{ secrets.MAC_CERTIFICATE_P12_RAW }}
CERT_PASSWORD: "${{ secrets.MAC_CERTIFICATE_PASSWORD }}" CERT_PASSWORD: ${{ secrets.MAC_CERTIFICATE_PASSWORD }}
run: | run: |
if [ -z "$CERT_PASSWORD" ]; then if [ -z "$CERT_PASSWORD" ]; then
echo "Password secret is empty or missing!" echo "Password secret is empty or missing!"
@ -41,7 +41,7 @@ jobs:
echo "Password is set" echo "Password is set"
fi fi
if [ -z "$CERT_P12_BASE64" ]; then if [ -z "$CERT_P12_RAW" ]; then
echo "P12 secret is empty or missing!" echo "P12 secret is empty or missing!"
exit 1 exit 1
else else
@ -50,10 +50,11 @@ jobs:
- name: Import macOS certificate - name: Import macOS certificate
env: env:
CERT_P12_BASE64: ${{ secrets.MAC_CERTIFICATE_P12 }} CERT_P12_RAW: ${{ secrets.MAC_CERTIFICATE_P12_RAW }}
CERT_PASSWORD: "${{ secrets.MAC_CERTIFICATE_PASSWORD }}" CERT_PASSWORD: ${{ secrets.MAC_CERTIFICATE_PASSWORD }}
run: | run: |
echo "$CERT_P12_BASE64" | tr -d '\n\r ' | base64 -D > cert.p12 # Write raw secret directly to file (no decoding)
echo "$CERT_P12_RAW" > cert.p12
security import cert.p12 \ security import cert.p12 \
-k build.keychain \ -k build.keychain \
@ -66,13 +67,12 @@ jobs:
-k "" \ -k "" \
build.keychain build.keychain
- name: Build macOS - name: Build macOS
env: env:
CSC_IDENTITY_AUTO_DISCOVERY: false CSC_IDENTITY_AUTO_DISCOVERY: false
CSC_KEYCHAIN: build.keychain CSC_KEYCHAIN: build.keychain
CSC_NAME: "Anirudh Sevugan" CSC_NAME: "Anirudh Sevugan"
CSC_KEY_PASSWORD: "${{ secrets.MAC_CERTIFICATE_PASSWORD }}" CSC_KEY_PASSWORD: ${{ secrets.MAC_CERTIFICATE_PASSWORD }}
run: npx electron-builder --mac --x64 --arm64 --universal run: npx electron-builder --mac --x64 --arm64 --universal
working-directory: simpliplay working-directory: simpliplay