@@ -105,6 +105,7 @@ jobs:
105
105
run : |
106
106
# See: https://docs.github.com/actions/writing-workflows/choosing-what-your-workflow-does/workflow-commands-for-github-actions#setting-an-environment-variable
107
107
echo "BUILD_FOLDER=${{ env.PROJECT_NAME }}_osx_${{ matrix.build.folder-suffix }}" >>"$GITHUB_ENV"
108
+
108
109
TAG="${GITHUB_REF/refs\/tags\//}"
109
110
echo "PACKAGE_FILENAME=${{ env.PROJECT_NAME }}_${TAG}_${{ matrix.build.package-suffix }}" >>$GITHUB_ENV
110
111
@@ -125,21 +126,26 @@ jobs:
125
126
KEYCHAIN_PASSWORD : keychainpassword
126
127
run : |
127
128
echo "${{ secrets.INSTALLER_CERT_MAC_P12 }}" | base64 --decode >"${{ env.INSTALLER_CERT_MAC_PATH }}"
129
+
128
130
security create-keychain \
129
131
-p "${{ env.KEYCHAIN_PASSWORD }}" \
130
132
"${{ env.KEYCHAIN }}"
133
+
131
134
security default-keychain \
132
135
-s "${{ env.KEYCHAIN }}"
136
+
133
137
security unlock-keychain \
134
138
-p "${{ env.KEYCHAIN_PASSWORD }}" \
135
139
"${{ env.KEYCHAIN }}"
140
+
136
141
security import \
137
142
"${{ env.INSTALLER_CERT_MAC_PATH }}" \
138
143
-k "${{ env.KEYCHAIN }}" \
139
144
-f pkcs12 \
140
145
-A \
141
146
-T "/usr/bin/codesign" \
142
147
-P "${{ secrets.INSTALLER_CERT_MAC_PASSWORD }}"
148
+
143
149
security set-key-partition-list \
144
150
-S apple-tool:,apple: \
145
151
-s \
@@ -155,6 +161,7 @@ jobs:
155
161
unzip \
156
162
gon_macos.zip \
157
163
-d /usr/local/bin
164
+
158
165
- name : Write gon config to file
159
166
# gon does not allow env variables in config file (https://github.com/mitchellh/gon/issues/20)
160
167
run : |
@@ -197,6 +204,7 @@ jobs:
197
204
-czv \
198
205
-f "${{ env.PACKAGE_FILENAME }}" \
199
206
"${{ env.BUILD_FOLDER }}/"
207
+
200
208
- name : Replace artifact with notarized build
201
209
uses : actions/upload-artifact@v4
202
210
with :
@@ -237,12 +245,15 @@ jobs:
237
245
unzip \
238
246
-p /tmp/3.2.0.zip semver-tool-3.2.0/src/semver \
239
247
>/tmp/semver
248
+
240
249
chmod \
241
250
+x \
242
251
/tmp/semver
252
+
243
253
if [[ "$(/tmp/semver get prerel "${GITHUB_REF/refs\/tags\//}")" ]]; then
244
254
echo "IS_PRE=true" >>$GITHUB_OUTPUT
245
255
fi
256
+
246
257
- name : Create Github Release and upload artifacts
247
258
uses : ncipollo/release-action@v1
248
259
with :
0 commit comments