From 6b21fdbcc6b2ccd7ae77fbfa1eab2333ab97d31c Mon Sep 17 00:00:00 2001
From: Jay Lee <jay0lee@gmail.com>
Date: Tue, 17 Sep 2024 07:47:28 -0400
Subject: [PATCH] actions: early work to add MacOS code signing

---
 .github/workflows/build.yml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index a378375b..06428a44 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -201,6 +201,13 @@ jobs:
           #brew install swig
           #brew install ncurses
 
+      - name: MacOS import developer certificates for signing
+        if: runner.os == 'macOS'
+        uses: apple-actions/import-codesign-certs@v3
+        with: 
+          p12-file-base64: ${{ secrets.CERTIFICATES_P12 }}
+          p12-password: ${{ secrets.CERTIFICATES_P12_PASSWORD }}
+
       - name: Windows Configure VCode
         uses: ilammy/msvc-dev-cmd@v1
         if: runner.os == 'Windows' && steps.cache-python-ssl.outputs.cache-hit != 'true'
@@ -600,6 +607,11 @@ jobs:
           rm -v "${gam}"
           mv -v "${gam}-staticx" "${gam}"
 
+      - name: MacOS sign GAM binary
+        if: runner.os == 'macOS'
+        run: |
+          security find-identity -p basic -v
+
       - name: Basic Tests all jobs
         id: basictests
         run: |