Add runtime scripts etc. for checking MacOS SDK version etc.

.github/workflows/continuous-integration-workflow.yml

@@ -65,6 +65,8 @@ jobs:
         OSC_CMAKE_CONFIG_EXTRA="-Werror=dev -DCMAKE_OSX_SYSROOT=/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX14.2.sdk -DCMAKE_OSX_DEPLOYMENT_TARGET=14 -DCMAKE_OSX_ARCHITECTURES=x86_64"
         export OSC_BUILD_CONCURRENCY=$(sysctl -n hw.physicalcpu)
         ./scripts/build_mac.sh
+        ./scripts/macos_check-dependencies.py osc-build/osc/osc
+        ./scripts/macos_check-sdk.py 14.shouldfail osc-build/osc/osc
 
     - uses: actions/upload-artifact@v4
       with:

scripts/macos_check-dependencies.py

@@ -0,0 +1,20 @@
+#!/usr/bin/env python3
+
+import argparse
+import subprocess
+
+whitelisted_library_prefixes = [
+    '/System/Library',
+    '/usr/lib/libc++',
+    '/usr/lib/libobjc',
+    '/usr/lib/libSystem.B.dylib'
+]
+
+parser = argparse.ArgumentParser(description='check that the given binary (usually, osc) only uses whitelisted libraries')
+parser.add_argument('binary', help='path to the binary')
+args = parser.parse_args()
+
+output = subprocess.check_output(f'otool -L {args.binary}', shell=True).decode('utf-8')
+for line in output.splitlines():
+    if line.startswith('\t'):
+        assert any([line[1:].startswith(x) for x in whitelisted_library_prefixes]), f'{line} isnt a permitted dependency'

scripts/macos_check-sdk.py

@@ -0,0 +1,14 @@
+#!/usr/bin/env python3
+
+
+import argparse
+import subprocess
+
+parser = argparse.ArgumentParser(description='check that the given binary uses the correct MacOS SDK')
+parser.add_argument('expected_sdk_version', help='the expected SDK version')
+parser.add_argument('binary', help='the binary to check')
+args = parser.parse_args()
+
+sdk_version = subprocess.check_output(f'otool -l {args.binary} | grep sdk', shell=True).decode('utf-8').split(' ')[-1].strip()
+assert sdk_version == args.expected_sdk_version, f'{sdk_version} is not the expected SDK version ({args.expected_sdk_version})'
+