native macOS codings agent orchestrator
Fix keychain setup and add debug output for codesign
+15
-9
+15
-9
.github/workflows/release.yml
+15
-9
.github/workflows/release.yml
···
44
44
security unlock-keychain -p "$KEYCHAIN_PASSWORD" build.keychain
45
45
security import build-cert.p12 -k build.keychain -P "$DEVELOPER_ID_CERT_PASSWORD" -T /usr/bin/codesign -T /usr/bin/security -T /usr/bin/xcodebuild
46
46
security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "$KEYCHAIN_PASSWORD" build.keychain
47
-
security list-keychains -s build.keychain
47
+
security list-keychains -d user -s build.keychain $(security list-keychains -d user | tr -d '"')
48
+
security default-keychain -s build.keychain
49
+
security find-identity -v -p codesigning build.keychain
48
50
- run: make build-ghostty-xcframework
49
51
- run: |
50
52
xcodebuild -project supacode.xcodeproj -scheme supacode -configuration Release -archivePath build/supacode.xcarchive archive CODE_SIGN_IDENTITY="$DEVELOPER_ID_IDENTITY" OTHER_CODE_SIGN_FLAGS="--timestamp" 2>&1 | mise exec -- xcsift -qw
···
66
68
</plist>
67
69
EOF
68
70
xcodebuild -exportArchive -archivePath build/supacode.xcarchive -exportPath build/export -exportOptionsPlist build/ExportOptions.plist 2>&1 | mise exec -- xcsift -qw
69
-
- name: Resign Sparkle framework
71
+
- name: Re-sign Sparkle framework
70
72
run: |
73
+
set -ex
71
74
APP_PATH="$(find build/export -name "supacode.app" -maxdepth 3 -print -quit)"
72
75
SPARKLE="$APP_PATH/Contents/Frameworks/Sparkle.framework/Versions/B"
73
76
74
-
codesign -f -s "$DEVELOPER_ID_IDENTITY" -o runtime --timestamp "$SPARKLE/XPCServices/Installer.xpc"
75
-
codesign -f -s "$DEVELOPER_ID_IDENTITY" -o runtime --timestamp --preserve-metadata=entitlements "$SPARKLE/XPCServices/Downloader.xpc"
76
-
codesign -f -s "$DEVELOPER_ID_IDENTITY" -o runtime --timestamp "$SPARKLE/Updater.app"
77
-
codesign -f -s "$DEVELOPER_ID_IDENTITY" -o runtime --timestamp "$SPARKLE/Autoupdate"
78
-
codesign -f -s "$DEVELOPER_ID_IDENTITY" -o runtime --timestamp "$SPARKLE/Sparkle"
79
-
codesign -f -s "$DEVELOPER_ID_IDENTITY" -o runtime --timestamp "$APP_PATH/Contents/Frameworks/Sparkle.framework"
80
-
codesign -f -s "$DEVELOPER_ID_IDENTITY" -o runtime --timestamp "$APP_PATH"
77
+
echo "Using identity: $DEVELOPER_ID_IDENTITY"
78
+
security find-identity -v -p codesigning
79
+
80
+
codesign -f -s "$DEVELOPER_ID_IDENTITY" -o runtime --timestamp -v "$SPARKLE/XPCServices/Installer.xpc"
81
+
codesign -f -s "$DEVELOPER_ID_IDENTITY" -o runtime --timestamp --preserve-metadata=entitlements -v "$SPARKLE/XPCServices/Downloader.xpc"
82
+
codesign -f -s "$DEVELOPER_ID_IDENTITY" -o runtime --timestamp -v "$SPARKLE/Updater.app"
83
+
codesign -f -s "$DEVELOPER_ID_IDENTITY" -o runtime --timestamp -v "$SPARKLE/Autoupdate"
84
+
codesign -f -s "$DEVELOPER_ID_IDENTITY" -o runtime --timestamp -v "$SPARKLE/Sparkle"
85
+
codesign -f -s "$DEVELOPER_ID_IDENTITY" -o runtime --timestamp -v "$APP_PATH/Contents/Frameworks/Sparkle.framework"
86
+
codesign -f -s "$DEVELOPER_ID_IDENTITY" -o runtime --timestamp -v "$APP_PATH"
81
87
82
88
codesign -vvv --deep --strict "$APP_PATH"
83
89
echo "Signature verified successfully"