native macOS codings agent orchestrator
Reduce keychain setup noise in release workflow
Silence verbose security import/partition-list output and remove
redundant find-identity calls that dump keychain attributes to logs.
+5
-6
+5
-6
.github/workflows/release.yml
+5
-6
.github/workflows/release.yml
···
47
47
GHOSTTY_SHA=$(git -C ThirdParty/ghostty rev-parse HEAD)
48
48
printf '%s\n' "GHOSTTY_SHA=$GHOSTTY_SHA" >> "$GITHUB_ENV"
49
49
- run: echo "TAG=${{ github.event.release.tag_name }}" >> "$GITHUB_ENV"
50
-
- run: |
50
+
- name: Setup keychain
51
+
run: |
51
52
echo "$DEVELOPER_ID_CERT_P12" | base64 --decode > build-cert.p12
52
53
security create-keychain -p "$KEYCHAIN_PASSWORD" build.keychain
53
54
security set-keychain-settings -t 3600 -u build.keychain
54
55
security unlock-keychain -p "$KEYCHAIN_PASSWORD" build.keychain
55
-
security import build-cert.p12 -k build.keychain -P "$DEVELOPER_ID_CERT_PASSWORD" -T /usr/bin/codesign -T /usr/bin/security -T /usr/bin/xcodebuild
56
-
security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "$KEYCHAIN_PASSWORD" build.keychain
56
+
security import build-cert.p12 -k build.keychain -P "$DEVELOPER_ID_CERT_PASSWORD" -T /usr/bin/codesign -T /usr/bin/security -T /usr/bin/xcodebuild > /dev/null
57
+
security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "$KEYCHAIN_PASSWORD" build.keychain > /dev/null
57
58
security list-keychains -d user -s build.keychain $(security list-keychains -d user | tr -d '"')
58
59
security default-keychain -s build.keychain
59
-
security find-identity -v -p codesigning build.keychain
60
60
DEVELOPER_ID_IDENTITY_SHA=$(security find-identity -v -p codesigning build.keychain | grep "Developer ID Application" | head -1 | awk '{print $2}')
61
61
if [ -z "$DEVELOPER_ID_IDENTITY_SHA" ]; then
62
62
echo "::error::Developer ID Application identity not found in keychain"
63
63
exit 1
64
64
fi
65
+
echo "Found identity: $DEVELOPER_ID_IDENTITY_SHA"
65
66
echo "DEVELOPER_ID_IDENTITY_SHA=$DEVELOPER_ID_IDENTITY_SHA" >> "$GITHUB_ENV"
66
67
- name: Ghostty cache
67
68
uses: actions/cache@v4
···
112
113
SPARKLE="$APP_PATH/Contents/Frameworks/Sparkle.framework/Versions/B"
113
114
114
115
echo "Using identity: $DEVELOPER_ID_IDENTITY"
115
-
security find-identity -v -p codesigning
116
-
117
116
codesign -f -s "$DEVELOPER_ID_IDENTITY_SHA" -o runtime --timestamp -v "$SPARKLE/XPCServices/Installer.xpc"
118
117
codesign -f -s "$DEVELOPER_ID_IDENTITY_SHA" -o runtime --timestamp --preserve-metadata=entitlements -v "$SPARKLE/XPCServices/Downloader.xpc"
119
118
codesign -f -s "$DEVELOPER_ID_IDENTITY_SHA" -o runtime --timestamp -v "$SPARKLE/Updater.app"