Improve code signing to work

This commit is contained in:
Anirudh Sevugan 2025-08-07 20:17:31 -05:00 committed by GitHub
parent 5b82845458
commit b5007ad65e
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -25,9 +25,10 @@ jobs:
- name: Create a temporary keychain - name: Create a temporary keychain
run: | run: |
security create-keychain -p "" build.keychain KEYCHAIN_PASSWORD="" # Use a variable for the password
security create-keychain -p "$KEYCHAIN_PASSWORD" build.keychain
security list-keychains -s build.keychain login.keychain-db security list-keychains -s build.keychain login.keychain-db
security unlock-keychain -p "" build.keychain security unlock-keychain -p "$KEYCHAIN_PASSWORD" build.keychain
- name: Check PEM secret presence - name: Check PEM secret presence
env: env:
@ -46,15 +47,13 @@ jobs:
run: | run: |
echo "$CERT_PEM" > cert.pem echo "$CERT_PEM" > cert.pem
# Import certificate (assuming private key is included in PEM) # Import certificate with empty password and allow it for codesigning
security import cert.pem \ security import cert.pem -k build.keychain -P "" -T /usr/bin/codesign
-k build.keychain \
-T /usr/bin/codesign
# Trust the certificate for codesigning purposes
security set-key-partition-list \ security set-key-partition-list \
-S apple-tool:,apple: \ -S apple-tool:,apple: \
-s \ -k "$KEYCHAIN_PASSWORD" \
-k "" \
build.keychain build.keychain
- name: Build macOS - name: Build macOS