actions: actually try to sign gam binary for MacOS

This commit is contained in:
Jay Lee
2024-09-17 11:52:34 -04:00
committed by GitHub
parent 480aca680d
commit 631ce68126

View File

@@ -205,6 +205,7 @@ jobs:
if: runner.os == 'macOS' if: runner.os == 'macOS'
uses: apple-actions/import-codesign-certs@v3 uses: apple-actions/import-codesign-certs@v3
with: with:
keychain: signing_temp
p12-file-base64: ${{ secrets.CERTIFICATES_P12 }} p12-file-base64: ${{ secrets.CERTIFICATES_P12 }}
p12-password: ${{ secrets.CERTIFICATES_P12_PASSWORD }} p12-password: ${{ secrets.CERTIFICATES_P12_PASSWORD }}
@@ -603,14 +604,16 @@ jobs:
;; ;;
esac esac
echo "ldlib=${ldlib}" echo "ldlib=${ldlib}"
$PYTHON -m staticx -l "${ldlib}" "${gam}" "${gam}-staticx" $PYTHON -m staticx -l "${ldlib}" "$gam" "${gam}-staticx"
rm -v "${gam}" rm -v "$gam"
mv -v "${gam}-staticx" "${gam}" mv -v "${gam}-staticx" "$gam"
- name: MacOS sign GAM binary - name: MacOS sign GAM binary
if: runner.os == 'macOS' if: runner.os == 'macOS'
run: | run: |
security find-identity -p basic -v security find-identity -v signing_temp.keychain
codesign --force --deep --sign "Jay Lee" --options=runtime --entitlements "${GITHUB_WORKSPACE}/.github/actions/entitlements.xml" --timestamp "$gam"
codesign -dv --verbose=4 "$gam"
- name: Basic Tests all jobs - name: Basic Tests all jobs
id: basictests id: basictests