Update build-macos.yml

This commit is contained in:
Anirudh Sevugan 2025-08-07 19:38:38 -05:00 committed by GitHub
parent dbd91eeebf
commit e3412a7f92
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -23,21 +23,27 @@ jobs:
run: npm install run: npm install
working-directory: simpliplay working-directory: simpliplay
- name: Create a temporary keychain
run: |
security create-keychain -p "" build.keychain
security list-keychains -s build.keychain login.keychain-db
security unlock-keychain -p "" build.keychain
- name: Import macOS certificate - name: Import macOS certificate
env: env:
CERT_P12_BASE64: ${{ secrets.MAC_CERTIFICATE_P12 }} CERT_P12_BASE64: ${{ secrets.MAC_CERTIFICATE_P12 }}
CERT_PASSWORD: ${{ secrets.MAC_CERTIFICATE_PASSWORD }} CERT_PASSWORD: ${{ secrets.MAC_CERTIFICATE_PASSWORD }}
run: | run: |
echo "$CERT_P12_BASE64" | base64 -D > cert.p12 echo "$CERT_P12_BASE64" | base64 --decode > cert.p12
security import cert.p12 -k ~/Library/Keychains/login.keychain-db -P "$CERT_PASSWORD" -T /usr/bin/codesign security import cert.p12 -k build.keychain -P "$CERT_PASSWORD" -T /usr/bin/codesign
security set-key-partition-list -S apple-tool:,apple: -s -k "" ~/Library/Keychains/login.keychain-db security set-key-partition-list -S apple-tool:,apple: -s -k "" build.keychain
- name: Build macOS - name: Build macOS
env: env:
CSC_IDENTITY_AUTO_DISCOVERY: false CSC_IDENTITY_AUTO_DISCOVERY: false
CSC_KEYCHAIN: login.keychain-db CSC_KEYCHAIN: build.keychain
CSC_NAME: "Anirudh Sevugan" CSC_NAME: "Anirudh Sevugan" # <-- Make sure this matches exactly your cert's CN
CSC_LINK: ${{ secrets.MAC_CERTIFICATE_PASSWORD }} CSC_KEY_PASSWORD: ${{ secrets.MAC_CERTIFICATE_PASSWORD }}
run: npx electron-builder --mac --x64 --arm64 --universal run: npx electron-builder --mac --x64 --arm64 --universal
working-directory: simpliplay working-directory: simpliplay
@ -46,3 +52,8 @@ jobs:
with: with:
name: builds name: builds
path: simpliplay/dist/*.dmg path: simpliplay/dist/*.dmg
- name: Delete temporary keychain
if: always()
run: |
security delete-keychain build.keychain