diff --git a/.github/workflows/desktop-build.yml b/.github/workflows/desktop-build.yml index 549634f69..55cf386d7 100644 --- a/.github/workflows/desktop-build.yml +++ b/.github/workflows/desktop-build.yml @@ -472,27 +472,22 @@ jobs: if [[ -n "$MACOS_CERTIFICATE_NAME" ]]; then security unlock-keychain -p "$MACOS_CI_KEYCHAIN_PWD" build.keychain codesign --sign="$MACOS_CERTIFICATE_NAME" --entitlements=".ci/macos.entitlements" --options=runtime --force --deep --timestamp --verbose ${{steps.build.outputs.path}} - - echo "Inspect/Verify app signature" + + echo "Inspect app signature" codesign -dv --verbose ${{steps.build.outputs.path}} - echo "..." - codesign --verify --verbose ${{steps.build.outputs.path}} - echo "." + echo "Verify app signature" codesign --verify --deep --verbose ${{steps.build.outputs.path}} - echo "... ..." echo "Checking Gatekeepr conformance of the app" codesign --verify --deep --strict --verbose=2 ${{steps.build.outputs.path}} + echo "Assess the application" + spctl --assess --type execute --verbose ${{steps.build.outputs.path}} + echo "Checking Gatekeepr conformance of the app 2" spctl -a -t exec -vv ${{steps.build.outputs.path}} - echo "Assess the application" - spctl -a -t exec -vv ${{steps.build.outputs.path}} - echo "." - spctl --assess --type execute --verbose ${{steps.build.outputs.path}} - fi - name: Notarize app bundle