Skip to content

Conversation

@bikmazefe
Copy link
Member

@bikmazefe bikmazefe commented May 6, 2025

Add macOS binary signing using Apple Distribution certificate.

@bikmazefe bikmazefe marked this pull request as ready for review May 6, 2025 13:46
@bikmazefe bikmazefe requested review from jablan and theSoenke May 6, 2025 13:46
echo "$CERTIFICATE_BASE64" | base64 --decode -o "$CERTIFICATE_PATH"

# Create temporary keychain
security create-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do you need to run this inside a MacOS container to have the commands available?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Very good and important point 😬 I assumed we were already doing it but confused it with the IOS SDK workflow.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'll also need to fix the dist directory though, as we're signing them in a separate action now.

@bikmazefe bikmazefe requested a review from theSoenke May 6, 2025 14:52
@jablan
Copy link
Collaborator

jablan commented May 7, 2025

@bikmazefe is there a way to try this out before merging?

@bikmazefe
Copy link
Member Author

@bikmazefe is there a way to try this out before merging?

@jablan Yeah that's what I'm trying to find out currently. It seems like we can use the act library locally to simulate the GH workflow but we'd need to skip the actual signing part 🙁

Copy link
Collaborator

@jablan jablan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm up for trying it out in the repo, I guess the worst case it will fail so you'd have another fix(CLI) PR, or two.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants