build: attempt to fix mas 7

This commit is contained in:
johannesjo 2025-11-09 20:56:41 +01:00
parent c0d55063f0
commit 3a02b5b5a7

View file

@ -45,13 +45,22 @@ jobs:
restore-keys: |
${{ runner.os }}-node-
- uses: apple-actions/import-codesign-certs@v5
with:
p12-file-base64: ${{ secrets.mac_certs }}
p12-password: ${{ secrets.mac_certs_password }}
- name: List available signing identities
run: security find-identity -v -p codesigning
- name: Configure signing keychain
env:
MAC_CERTS: ${{ secrets.mac_certs }}
MAC_CERTS_PASSWORD: ${{ secrets.mac_certs_password }}
run: |
CERT_PATH="$RUNNER_TEMP/mac-certs.p12"
echo "$MAC_CERTS" | base64 --decode > "$CERT_PATH"
security create-keychain -p "" build.keychain
security set-keychain-settings -lut 21600 build.keychain
security unlock-keychain -p "" build.keychain
curl -fsSL https://www.apple.com/certificateauthority/AppleWWDRCAG4.cer -o "$RUNNER_TEMP/AppleWWDRCAG4.cer"
security import "$RUNNER_TEMP/AppleWWDRCAG4.cer" -k build.keychain -T /usr/bin/codesign
security import "$CERT_PATH" -k build.keychain -P "$MAC_CERTS_PASSWORD" -T /usr/bin/codesign -T /usr/bin/security -T /usr/bin/pkgbuild -T /usr/bin/productbuild
security list-keychains -s build.keychain login.keychain
security set-key-partition-list -S apple-tool:,apple: -k "" build.keychain
security find-identity -v -p codesigning build.keychain
- name: Workaround for nx issue and dmg licence issue
run: npm install @nx/nx-darwin-arm64 dmg-license