This commit is contained in:
tooomm 2026-03-17 22:47:37 +01:00 committed by GitHub
parent a220004054
commit d8a0c929de
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -472,27 +472,22 @@ jobs:
if [[ -n "$MACOS_CERTIFICATE_NAME" ]]; then
security unlock-keychain -p "$MACOS_CI_KEYCHAIN_PWD" build.keychain
codesign --sign="$MACOS_CERTIFICATE_NAME" --entitlements=".ci/macos.entitlements" --options=runtime --force --deep --timestamp --verbose ${{steps.build.outputs.path}}
echo "Inspect/Verify app signature"
echo "Inspect app signature"
codesign -dv --verbose ${{steps.build.outputs.path}}
echo "..."
codesign --verify --verbose ${{steps.build.outputs.path}}
echo "."
echo "Verify app signature"
codesign --verify --deep --verbose ${{steps.build.outputs.path}}
echo "... ..."
echo "Checking Gatekeepr conformance of the app"
codesign --verify --deep --strict --verbose=2 ${{steps.build.outputs.path}}
echo "Assess the application"
spctl --assess --type execute --verbose ${{steps.build.outputs.path}}
echo "Checking Gatekeepr conformance of the app 2"
spctl -a -t exec -vv ${{steps.build.outputs.path}}
echo "Assess the application"
spctl -a -t exec -vv ${{steps.build.outputs.path}}
echo "."
spctl --assess --type execute --verbose ${{steps.build.outputs.path}}
fi
- name: Notarize app bundle