native macOS codings agent orchestrator
Fix Sparkle signing with preserve-metadata for Downloader.xpc
+10
-10
+10
-10
.github/workflows/release.yml
+10
-10
.github/workflows/release.yml
···
69
69
- name: Re-sign Sparkle framework
70
70
run: |
71
71
APP_PATH="$(find build/export -name "supacode.app" -maxdepth 3 -print -quit)"
72
-
SPARKLE="$APP_PATH/Contents/Frameworks/Sparkle.framework"
73
-
CODESIGN_ARGS="--force --options runtime --timestamp --sign $DEVELOPER_ID_IDENTITY"
72
+
SPARKLE="$APP_PATH/Contents/Frameworks/Sparkle.framework/Versions/B"
74
73
75
-
codesign $CODESIGN_ARGS "$SPARKLE/Versions/B/XPCServices/Downloader.xpc"
76
-
codesign $CODESIGN_ARGS "$SPARKLE/Versions/B/XPCServices/Installer.xpc"
77
-
codesign $CODESIGN_ARGS "$SPARKLE/Versions/B/Updater.app"
78
-
codesign $CODESIGN_ARGS "$SPARKLE/Versions/B/Autoupdate"
79
-
codesign $CODESIGN_ARGS "$SPARKLE/Versions/B/Sparkle"
80
-
codesign $CODESIGN_ARGS "$SPARKLE"
81
-
codesign $CODESIGN_ARGS "$APP_PATH"
74
+
codesign -f -s "$DEVELOPER_ID_IDENTITY" -o runtime --timestamp "$SPARKLE/XPCServices/Installer.xpc"
75
+
codesign -f -s "$DEVELOPER_ID_IDENTITY" -o runtime --timestamp --preserve-metadata=entitlements "$SPARKLE/XPCServices/Downloader.xpc"
76
+
codesign -f -s "$DEVELOPER_ID_IDENTITY" -o runtime --timestamp "$SPARKLE/Updater.app"
77
+
codesign -f -s "$DEVELOPER_ID_IDENTITY" -o runtime --timestamp "$SPARKLE/Autoupdate"
78
+
codesign -f -s "$DEVELOPER_ID_IDENTITY" -o runtime --timestamp "$SPARKLE/Sparkle"
79
+
codesign -f -s "$DEVELOPER_ID_IDENTITY" -o runtime --timestamp "$APP_PATH/Contents/Frameworks/Sparkle.framework"
80
+
codesign -f -s "$DEVELOPER_ID_IDENTITY" -o runtime --timestamp "$APP_PATH"
82
81
83
-
codesign --verify --deep --strict "$APP_PATH"
82
+
codesign -vvv --deep --strict "$APP_PATH"
83
+
echo "Signature verified successfully"
84
84
- name: Notarize and staple
85
85
run: |
86
86
APP_PATH="$(find build/export -name "supacode.app" -maxdepth 3 -print -quit)"