Improve code signing to work

This commit is contained in:
Anirudh Sevugan 2025-08-07 20:17:31 -05:00 committed by GitHub
parent 5b82845458
commit b5007ad65e
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -25,9 +25,10 @@ jobs:
- name: Create a temporary keychain
run: |
security create-keychain -p "" build.keychain
KEYCHAIN_PASSWORD="" # Use a variable for the password
security create-keychain -p "$KEYCHAIN_PASSWORD" build.keychain
security list-keychains -s build.keychain login.keychain-db
security unlock-keychain -p "" build.keychain
security unlock-keychain -p "$KEYCHAIN_PASSWORD" build.keychain
- name: Check PEM secret presence
env:
@ -46,15 +47,13 @@ jobs:
run: |
echo "$CERT_PEM" > cert.pem
# Import certificate (assuming private key is included in PEM)
security import cert.pem \
-k build.keychain \
-T /usr/bin/codesign
# Import certificate with empty password and allow it for codesigning
security import cert.pem -k build.keychain -P "" -T /usr/bin/codesign
# Trust the certificate for codesigning purposes
security set-key-partition-list \
-S apple-tool:,apple: \
-s \
-k "" \
-k "$KEYCHAIN_PASSWORD" \
build.keychain
- name: Build macOS