fix: unable to add sign key missing in keychain

phcode-dev · Nov 3, 2023 · 3ff0189 · 3ff0189
1 parent 4ddfdf1
commit 3ff0189
Showing 1 changed file with 9 additions and 3 deletions.
diff --git a/.github/workflows/tauri-build-dev.yml b/.github/workflows/tauri-build-dev.yml
@@ -119,11 +119,17 @@ jobs:
       - name: Sign embedded executables for Mac
         if: matrix.platform == 'macos-latest'
         env :
-          CERTIFICATE: ${{ secrets.APPLE_EXTERNAL_BINARY_SIGN_CERTIFICATE }}
+          CERTIFICATE_NAME: ${{ secrets.APPLE_EXTERNAL_BINARY_SIGN_CERTIFICATE }}
+          APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
+          APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
         run: |
-          cat ./src-build/mac/filesToSign | xargs  codesign -s "$CERTIFICATE" --timestamp --options runtime
+          CERT_FILE="Certificate.p12"
+          cat "$APPLE_CERTIFICATE" | base64 --decode > $CERT_FILE
+          security import $CERT_FILE -k ~/Library/Keychains/login.keychain -P "$APPLE_CERTIFICATE_PASSWORD" -T /usr/bin/codesign
+          rm $CERT_FILE
+          cat ./src-build/mac/filesToSign | xargs  codesign -s "$CERTIFICATE_NAME" --timestamp --options runtime
         shell: bash
-        
+
       - uses: tauri-apps/tauri-action@v0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}