this repo has no description
0
fork

Configure Feed

Select the types of activity you want to include in your feed.

Improve notarization

+24 -1
+24 -1
scripts/build.sh
··· 501 501 cp "${extracted_executable}" "${BUILD_OUTPUT_DIR}/axe" 502 502 print_success "Original executable replaced with notarized version" 503 503 504 + # Verify notarization status using spctl 505 + print_info "Verifying notarization with spctl assessment..." 506 + spctl -a -v "${BUILD_OUTPUT_DIR}/axe" 2>&1 | grep -q "accepted" || { 507 + print_info "Note: spctl shows 'not an app' for command-line tools - this is expected" 508 + print_info "Notarized command-line tools are validated differently by macOS" 509 + } 510 + 511 + # Check if the executable has the notarization signature 512 + print_info "Checking code signature details..." 513 + local sig_info=$(codesign -dv "${BUILD_OUTPUT_DIR}/axe" 2>&1) 514 + if echo "$sig_info" | grep -q "runtime"; then 515 + print_success "Executable has runtime hardening enabled (required for notarization)" 516 + else 517 + print_warning "Runtime hardening not detected in signature" 518 + fi 519 + 520 + print_success "Notarized executable is ready for distribution" 521 + 504 522 # Create final deployment package in temporary directory 505 523 print_info "Creating final deployment package..." 506 524 local final_package_name="AXe-Final-$(date +%Y%m%d-%H%M%S)" ··· 512 530 513 531 # Copy notarized executable and frameworks to final package 514 532 cp "${BUILD_OUTPUT_DIR}/axe" "${final_package_dir}/" 515 - cp -R "${BUILD_OUTPUT_DIR}/Frameworks" "${final_package_dir}/" 533 + if [ -d "${BUILD_OUTPUT_DIR}/Frameworks" ]; then 534 + cp -R "${BUILD_OUTPUT_DIR}/Frameworks" "${final_package_dir}/" 535 + print_info "Included Frameworks directory in final package" 536 + else 537 + print_info "No Frameworks directory found - creating executable-only package" 538 + fi 516 539 517 540 # Create final zip package 518 541 print_info "Creating final package: ${final_package_zip}"