From 89fbe15c9daf8bdae9cbe36e20b4945e75b019c8 Mon Sep 17 00:00:00 2001 From: lucaronin Date: Sat, 28 Feb 2026 11:49:51 +0100 Subject: [PATCH] =?UTF-8?q?ci:=20fix=20notarization=20=E2=80=94=20use=20Ta?= =?UTF-8?q?uri=20v2=20env=20vars=20(APPLE=5FCERTIFICATE=20+=20APPLE=5FSIGN?= =?UTF-8?q?ING=5FIDENTITY)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .github/workflows/release.yml | 21 +++------------------ 1 file changed, 3 insertions(+), 18 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index ab132fc3..82cb92d8 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -80,28 +80,13 @@ jobs: jq --arg v "$VERSION" '.version = $v' src-tauri/tauri.conf.json > tmp.json && mv tmp.json src-tauri/tauri.conf.json sed -i '' "s/^version = \".*\"/version = \"$VERSION\"/" src-tauri/Cargo.toml - - name: Import Developer ID certificate - env: - CERTIFICATE_P12_BASE64: ${{ secrets.APPLE_CERTIFICATE_P12 }} - CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }} - run: | - if [ -n "$CERTIFICATE_P12_BASE64" ]; then - echo "$CERTIFICATE_P12_BASE64" | base64 --decode > /tmp/certificate.p12 - security create-keychain -p "" build.keychain - security default-keychain -s build.keychain - security unlock-keychain -p "" build.keychain - security import /tmp/certificate.p12 -k build.keychain -P "$CERTIFICATE_PASSWORD" -T /usr/bin/codesign - security set-key-partition-list -S apple-tool:,apple: -s -k "" build.keychain - rm /tmp/certificate.p12 - echo "Certificate imported" - else - echo "No certificate - skipping code signing" - fi - - name: Build Tauri app (with signing + notarization) env: TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }} TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_KEY_PASSWORD }} + APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }} + APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }} + APPLE_SIGNING_IDENTITY: ${{ secrets.APPLE_SIGNING_IDENTITY }} APPLE_ID: ${{ secrets.APPLE_ID }} APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }} APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}