๐ Attempt codesigning in Github Actions #31
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Build Loop | ||
on: | ||
workflow_dispatch: | ||
push: | ||
branches: | ||
- develop | ||
paths: | ||
- Loop/** | ||
permissions: | ||
contents: write | ||
jobs: | ||
build_with_signing: | ||
name: Build Loop | ||
runs-on: macos-13 | ||
steps: | ||
- name: Checkout repository | ||
uses: actions/[email protected] | ||
- name: Switch Xcode version | ||
run: | | ||
sudo xcode-select -s "/Applications/Xcode_15.0.app" | ||
/usr/bin/xcodebuild -version | ||
# - name: Codesign Loop.app | ||
# uses: apple-actions/import-codesign-certs@v2 | ||
# with: | ||
# p12-file-base64: ${{ secrets.BUILD_CERTIFICATE_BASE64 }} | ||
# p12-password: ${{ secrets.P12_PASSWORD }} | ||
- name: Install dependencies | ||
run: | | ||
brew install xcbeautify create-dmg | ||
- name: Build Loop.app | ||
run: | | ||
make app | ||
- name: Codesign executable | ||
env: | ||
BUILD_CERTIFICATE_BASE64: ${{ secrets.BUILD_CERTIFICATE_BASE64 }} | ||
P12_PASSWORD: ${{ secrets.P12_PASSWORD }} | ||
run: | | ||
echo $BUILD_CERTIFICATE_BASE64 | base64 โdecode > certificate.p12 | ||
security create-keychain -p 12345678 build.keychain | ||
security default-keychain -s build.keychain | ||
security unlock-keychain -p 12345678 build.keychain | ||
security import certificate.p12 -k build.keychain -P $P12_PASSWORD -T /usr/bin/codesign | ||
security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k 12345678 build.keychain | ||
/usr/bin/codesign --force -s 9E3E2D5B7F0332BC44EA38F14A9714DEB8700A35 ./Build/Loop.app -v | ||
- name: Make zip & dmg | ||
with: | | ||
create-dmg \ | ||
--volname "Loop" \ | ||
--background "./assets/graphics/dmg-background.png" \ | ||
--window-pos 200 120 \ | ||
--window-size 660 400 \ | ||
--icon-size 160 \ | ||
--icon "Loop.app" 180 170 \ | ||
--hide-extension "Loop.app" \ | ||
--app-drop-link 480 170 \ | ||
--no-internet-enable \ | ||
"./Build/Loop.dmg" \ | ||
"./Build/Loop.app" | ||
ditto -c -k --sequesterRsrc --keepParent ./Build/Loop.app ./Build/Loop.zip | ||
- name: Upload build | ||
uses: actions/[email protected] | ||
with: | ||
name: Loop Build | ||
path: | | ||
Build/Loop.zip | ||
Build/Loop.dmg |