clean

Author: peterjah

.github/workflows/build.yml

@@ -62,15 +62,8 @@ jobs:
           ARCH: ${{ matrix.arch }}
           VERSION: ${{ inputs.tag_name }}
 
-      - name: Make binary executable
-        if: ${{ matrix.target != 'windows' }}
-        run: |
-          ls -la build/
-          chmod +x build/node-manager-plugin
-          md5 build/node-manager-plugin
-
       - name: Sign Macos binary
-        uses: massalabs/massa/.github/actions/sign-macos@1f2241fe16dc4f01796e19b0eae938256bf4eef3
+        uses: massalabs/massa/.github/actions/sign-macos@a7f27829f755d30fc9f29f6c0425536cc96be4c4
         if: ${{ runner.os == 'macOS' }}
         with:
           paths: "build/node-manager-plugin"
@@ -79,28 +72,6 @@ jobs:
           signing-identity: ${{ vars.APPLE_DEVELOPER_ID_APPLICATION }}
           entitlements: "entitlements.plist"
 
-      # - name: Import Apple signing certificate
-      #   uses: Apple-Actions/import-codesign-certs@v3
-      #   with:
-      #     p12-file-base64: ${{ secrets.APPLE_CERTIFICATE_P12_BASE64 }}
-      #     p12-password: ${{ secrets.APPLE_CERTIFICATE_P12_PASSWORD }}
-
-      # - name: Re-sign with entitlements (if custom action doesn't support entitlements)
-      #   if: ${{ runner.os == 'macOS' }}
-      #   run: |
-      #     echo "Re-signing with entitlements to ensure proper hardened runtime..."
-      #     codesign --force --options runtime --entitlements entitlements.plist --sign "${{ vars.APPLE_DEVELOPER_ID_APPLICATION }}" build/node-manager-plugin
-      #     echo "Verifying re-signed binary..."
-      #     codesign --verify --verbose build/node-manager-plugin
-
-      # - name: Verify code signing
-      #   if: ${{ runner.os == 'macOS' }}
-      #   run: |
-      #     echo "Verifying code signature..."
-      #     codesign --verify --verbose build/node-manager-plugin
-      #     codesign --display --verbose=4 build/node-manager-plugin
-      #     spctl --assess --type execute --verbose build/node-manager-plugin || echo "SPCTL assessment failed - this is expected before notarization"
-
       - name: Rename Plugin artifact
         run: |
           md5 build/node-manager-plugin

entitlements.plist

@@ -5,13 +5,5 @@
     <!-- CRITICAL: Required by memguard library for secure memory operations -->
     <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
     <true/>
-    
-    <!-- CRITICAL: Required by Go runtime reflection and config parsing -->
-    <key>com.apple.security.cs.allow-jit</key>
-    <true/>
-    
-    <!-- Required for subprocess execution (massa node/client) -->
-    <key>com.apple.security.cs.disable-library-validation</key>
-    <true/>
 </dict>
 </plist>