YangWX/crossdesk
1
0
Fork 0
mirror of https://github.com/kunkundi/crossdesk.git synced 2026-11-04 13:02:39 +08:00
Code Issues Packages Projects Releases Wiki Activity

[fix] add CI signing keychain to the user search list

Browse Source
This commit is contained in:
dijunkun
2026-10-29 13:57:52 +08:00
parent 613b58f582
commit dd774de4f8
1 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/scripts/setup_macos_signing.sh
+13
View File
@@ -51,6 +51,19 @@ security create-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
security set-keychain-settings -lut 21600 "$KEYCHAIN_PATH" security set-keychain-settings -lut 21600 "$KEYCHAIN_PATH"
security unlock-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH" security unlock-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
# codesign requires the identity's keychain on the user's search list even
# when --keychain is supplied. Preserve the runner's existing keychains so
# certificate-chain lookup continues to work. Deleting our temporary keychain
# during cleanup also removes its entry from the search list.
EXISTING_KEYCHAINS="$(security list-keychains -d user)"
KEYCHAIN_SEARCH_LIST=()
while IFS= read -r existing_keychain; do
[[ -n "$existing_keychain" && "$existing_keychain" != "$KEYCHAIN_PATH" ]] || continue
KEYCHAIN_SEARCH_LIST+=("$existing_keychain")
done <<< "$(printf '%s\n' "$EXISTING_KEYCHAINS" | sed -E 's/^[[:space:]]*"(.*)"[[:space:]]*$/\1/')"
security list-keychains -d user -s "$KEYCHAIN_PATH" \
${KEYCHAIN_SEARCH_LIST[@]+"${KEYCHAIN_SEARCH_LIST[@]}"}
for certificate in "$APP_P12" "$INSTALLER_P12"; do for certificate in "$APP_P12" "$INSTALLER_P12"; do
security import "$certificate" -P "$MACOS_P12_PASSWORD" \ security import "$certificate" -P "$MACOS_P12_PASSWORD" \
-t cert -f pkcs12 -k "$KEYCHAIN_PATH" \ -t cert -f pkcs12 -k "$KEYCHAIN_PATH" \