disable keys on osx

if NO_OSX_KEYS is set as a secret do not sign the osx build
This commit is contained in:
botanicvelious 2023-01-11 17:49:17 -07:00 committed by GitHub
parent 4c8a3b7adc
commit dfc37a0a0b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -19,6 +19,7 @@ env:
RENDEZVOUS_SERVER1: '${{ secrets.RENDEZVOUS_SERVER1 }}' RENDEZVOUS_SERVER1: '${{ secrets.RENDEZVOUS_SERVER1 }}'
RENDEZVOUS_SERVER2: '${{ secrets.RENDEZVOUS_SERVER2 }}' RENDEZVOUS_SERVER2: '${{ secrets.RENDEZVOUS_SERVER2 }}'
RENDEZVOUS_SERVER3: '${{ secrets.RENDEZVOUS_SERVER3 }}' RENDEZVOUS_SERVER3: '${{ secrets.RENDEZVOUS_SERVER3 }}'
NO_OSX_KEYS: ${{ secrets.NO_OSX_KEYS == 'False' }}
jobs: jobs:
build-for-windows: build-for-windows:
@ -154,6 +155,7 @@ jobs:
uses: actions/checkout@v3 uses: actions/checkout@v3
- name: Import the codesign cert - name: Import the codesign cert
if: ${{ env.NO_OSX_KEYS!= 'true' }}
uses: apple-actions/import-codesign-certs@v1 uses: apple-actions/import-codesign-certs@v1
with: with:
p12-file-base64: ${{ secrets.MACOS_P12_BASE64 }} p12-file-base64: ${{ secrets.MACOS_P12_BASE64 }}
@ -161,11 +163,13 @@ jobs:
keychain: rustdesk keychain: rustdesk
- name: Check sign and import sign key - name: Check sign and import sign key
if: ${{ env.NO_OSX_KEYS!= 'true' }}
run: | run: |
security default-keychain -s rustdesk.keychain security default-keychain -s rustdesk.keychain
security find-identity -v security find-identity -v
- name: Import notarize key - name: Import notarize key
if: ${{ env.NO_OSX_KEYS!= 'true' }}
uses: timheuer/base64-to-file@v1.2 uses: timheuer/base64-to-file@v1.2
with: with:
# https://gregoryszorc.com/docs/apple-codesign/stable/apple_codesign_rcodesign.html#notarizing-and-stapling # https://gregoryszorc.com/docs/apple-codesign/stable/apple_codesign_rcodesign.html#notarizing-and-stapling
@ -174,6 +178,7 @@ jobs:
encodedString: ${{ secrets.MACOS_NOTARIZE_JSON }} encodedString: ${{ secrets.MACOS_NOTARIZE_JSON }}
- name: Install rcodesign tool - name: Install rcodesign tool
if: ${{ env.NO_OSX_KEYS!= 'true' }}
shell: bash shell: bash
run: | run: |
pushd /tmp pushd /tmp
@ -244,6 +249,7 @@ jobs:
./build.py --flutter ${{ matrix.job.extra-build-args }} ./build.py --flutter ${{ matrix.job.extra-build-args }}
- name: Codesign app and create signed dmg - name: Codesign app and create signed dmg
if: ${{ env.NO_OSX_KEYS!= 'true' }}
run: | run: |
security default-keychain -s rustdesk.keychain security default-keychain -s rustdesk.keychain
security unlock-keychain -p ${{ secrets.MACOS_P12_PASSWORD }} rustdesk.keychain security unlock-keychain -p ${{ secrets.MACOS_P12_PASSWORD }} rustdesk.keychain