From 25d3879ee6ff3fd687bc69e99df3f96b6798cdc9 Mon Sep 17 00:00:00 2001 From: Wojciech Potrzebowski Date: Thu, 21 Sep 2023 09:33:08 +0100 Subject: [PATCH] changing gh actions so that signing is moved to nightly --- .github/workflows/ci.yml | 22 +--------------------- .github/workflows/nightly-build.yml | 20 ++++++++++++++++++++ 2 files changed, 21 insertions(+), 21 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index e1858184db..e94cff76f9 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -243,28 +243,8 @@ jobs: run: | cd installers/dist python ../../build_tools/fix_qt_folder_names_for_codesign.py SasView5.app - #hdiutil create SasView5.dmg -srcfolder SasView5.app -ov -format UDZO - - - name: Sign executable and create dmg (OSX) - if: ${{ matrix.installer && startsWith(matrix.os, 'macos') }} - env: - MACOS_CERTIFICATE: ${{ secrets.MACOS_CERTIFICATE }} - MACOS_CERTIFICATE_PWD: ${{ secrets.MACOS_CERTIFICATE_PWD }} - run: | - echo $MACOS_CERTIFICATE | base64 --decode > certificate.p12 - security create-keychain -p DloaAcYP build.keychain - security default-keychain -s build.keychain - security unlock-keychain -p DloaAcYP build.keychain - security import certificate.p12 -k build.keychain -P $MACOS_CERTIFICATE_PWD -T /usr/bin/codesign - security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k DloaAcYP build.keychain - - cd installers/dist - python ../../build_tools/fix_qt_folder_names_for_codesign.py SasView5.app - python ../../build_tools/code_sign_osx.py - codesign --verify --options=runtime --entitlements ../../build_tools/entitlements.plist --timestamp --deep --verbose=4 --force --sign "Developer ID Application: European Spallation Source Eric (W2AG9MPZ43)" SasView5.app hdiutil create SasView5.dmg -srcfolder SasView5.app -ov -format UDZO - codesign -s "Developer ID Application: European Spallation Source Eric (W2AG9MPZ43)" SasView5.dmg - + - name: Publish installer package if: ${{ matrix.installer }} uses: actions/upload-artifact@v3 diff --git a/.github/workflows/nightly-build.yml b/.github/workflows/nightly-build.yml index 8dcf35cd2b..904e69120f 100644 --- a/.github/workflows/nightly-build.yml +++ b/.github/workflows/nightly-build.yml @@ -39,6 +39,26 @@ jobs: with: python-version: ${{ matrix.python-version }} + - name: Sign executable and create dmg (OSX) + if: ${{ matrix.installer && startsWith(matrix.os, 'macos') }} + env: + MACOS_CERTIFICATE: ${{ secrets.MACOS_CERTIFICATE }} + MACOS_CERTIFICATE_PWD: ${{ secrets.MACOS_CERTIFICATE_PWD }} + run: | + echo $MACOS_CERTIFICATE | base64 --decode > certificate.p12 + security create-keychain -p DloaAcYP build.keychain + security default-keychain -s build.keychain + security unlock-keychain -p DloaAcYP build.keychain + security import certificate.p12 -k build.keychain -P $MACOS_CERTIFICATE_PWD -T /usr/bin/codesign + security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k DloaAcYP build.keychain + + cd installers/dist + python ../../build_tools/fix_qt_folder_names_for_codesign.py SasView5.app + python ../../build_tools/code_sign_osx.py + codesign --verify --options=runtime --entitlements ../../build_tools/entitlements.plist --timestamp --deep --verbose=4 --force --sign "Developer ID Application: European Spallation Source Eric (W2AG9MPZ43)" SasView5.app + hdiutil create SasView5.dmg -srcfolder SasView5.app -ov -format UDZO + codesign -s "Developer ID Application: European Spallation Source Eric (W2AG9MPZ43)" SasView5.dmg + - name: Rename artifacts run: | mv installers/dist/SasView-Installer-windows-*/setupSasView.exe installers/dist/setupSasView-nightly-Win64.exe