signed macos binaries

bbbradsmith · Apr 14, 2024 · 76d6db7 · 76d6db7
1 parent 5c27918
commit 76d6db7
Showing 1 changed file with 19 additions and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -237,6 +237,25 @@ jobs:
           export WXL_DIR=../wxlibArm
           export OUTDIR=output/makeArm INTDIR=intermediate/makeArm
           make mac
+      - name: Prepare Signature
+        if: github.event_name != 'pull_request'
+        env:
+          CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
+        run: echo $CERTIFICATE | base64 --decode -o certificate.p12
+      - name: Sign Command Line Tool
+        if: github.event_name != 'pull_request'
+        uses: indygreg/[email protected]
+        with:
+          input_path: output/makeArm/nsfplac
+          p12_file: certificate.p12
+          p12_password: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
+      - name: Sign Application Bundle
+        if: github.event_name != 'pull_request'
+        uses: indygreg/[email protected]
+        with:
+          input_path: output/makeArm/nsfplay/app
+          p12_file: certificate.p12
+          p12_password: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
       - name: Prepare Artifacts
         run: |
           mkdir artifact