summaryrefslogtreecommitdiffstats
path: root/.github/workflows
diff options
context:
space:
mode:
authorBe <be@mixxx.org>2020-12-27 20:03:56 -0600
committerBe <be@mixxx.org>2020-12-28 18:24:43 -0600
commit0c688066ec7ae17842e8160350041ab05994d351 (patch)
tree4b38a212effd9769f0aca63e32bb91c978bed083 /.github/workflows
parent5fe525fe73450039ef4cef2067830705244aed26 (diff)
notarize & staple macOS builds
Diffstat (limited to '.github/workflows')
-rw-r--r--.github/workflows/build.yml10
1 files changed, 7 insertions, 3 deletions
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 9593c6a4ed..dab060c8fe 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -275,10 +275,14 @@ jobs:
cpack -G External $CPACK_ARGS
working-directory: build
- - name: "[macOS] Sign Package"
+ - name: "[macOS] Sign, Notarize, and Staple Package"
if: runner.os == 'macOS' && env.MACOS_CODESIGN_OPENSSL_PASSWORD != null && env.MACOS_CODESIGN_CERTIFICATE_PASSWORD != null
- run: codesign --verbose=4 --options runtime --sign "${APPLE_CODESIGN_IDENTITY}" --entitlements ../packaging/macos/entitlements.plist *.dmg
- working-directory: build
+ run: packaging/macos/sign_notarize_staple.sh build/*.dmg
+ env:
+ APPLE_ID_USERNAME: rryan@mixxx.org
+ APPLE_BUNDLE_ID: org.mixxx.mixxx
+ APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.MACOS_NOTARIZATION_APP_SPECIFIC_PASSWORD }}
+ ASC_PROVIDER: FLYL4D545V
- name: "[Windows] Sign Package"
if: runner.os == 'Windows' && env.WINDOWS_CODESIGN_CERTIFICATE_PATH != null && env.WINDOWS_CODESIGN_CERTIFICATE_PASSWORD != null