jeirmeister/Cockatrice
1
0
Fork 0
mirror of https://github.com/Cockatrice/Cockatrice.git synced 2026-06-22 22:53:55 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

add checks

Browse source
This commit is contained in:
tooomm 2026-06-21 00:45:01 +02:00
parent cd6735adf2
commit ab4e606680
1 changed files with 7 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

7
.ci/sign_macos_bundle.sh
View file

@ -33,6 +33,10 @@ if [[ -n "$MACOS_CERTIFICATE_NAME" ]]; then
echo "::group::Sign app bundle" echo "::group::Sign app bundle"
security unlock-keychain -p "$MACOS_CI_KEYCHAIN_PWD" build.keychain security unlock-keychain -p "$MACOS_CI_KEYCHAIN_PWD" build.keychain
/usr/bin/codesign --sign="$MACOS_CERTIFICATE_NAME" --entitlements=".ci/macos.entitlements" --options=runtime --force --deep --timestamp --verbose "$APP_BUNDLE_PATH" /usr/bin/codesign --sign="$MACOS_CERTIFICATE_NAME" --entitlements=".ci/macos.entitlements" --options=runtime --force --deep --timestamp --verbose "$APP_BUNDLE_PATH"
# Verify signature
codesign --verify --deep --strict --verbose=2 "$APP_BUNDLE_PATH"
spctl -a -v --type install "$APP_BUNDLE_PATH"
echo "::endgroup::" echo "::endgroup::"
else else
echo "::error file=$0::MACOS_CERTIFICATE_NAME not set. Can not sign app bundle." echo "::error file=$0::MACOS_CERTIFICATE_NAME not set. Can not sign app bundle."
@ -63,6 +67,9 @@ if [[ -n "$MACOS_NOTARIZATION_APPLE_ID" ]]; then
# validated by macOS even when an internet connection is not available. # validated by macOS even when an internet connection is not available.
echo "Attach staple" echo "Attach staple"
xcrun stapler staple "$APP_BUNDLE_PATH" xcrun stapler staple "$APP_BUNDLE_PATH"
# Validate staple
xcrun stapler validate "$APP_BUNDLE_PATH"
echo "::endgroup::" echo "::endgroup::"
else else
echo "::error file=$0::MACOS_NOTARIZATION_APPLE_ID not set. Can not notarize app bundle." echo "::error file=$0::MACOS_NOTARIZATION_APPLE_ID not set. Can not notarize app bundle."