starred/aryx
1
0
Fork 0
mirror of https://github.com/davidkaya/aryx.git synced 2026-07-30 08:28:48 +02:00
Code Issues 3 Packages Projects Releases 10 Wiki Activity

build: add macos signing to release workflow

Browse Source 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
This commit is contained in:
David Kaya
2026-03-29 23:39:02 +02:00
co-authored by Copilot
parent 5f4318e761
commit e72bb7c7ca
6 changed files with 81 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/release.yml
+49
View File
@@ -126,6 +126,55 @@ jobs:
- name: Install dependencies
run: bun install --frozen-lockfile
- name: Prepare Apple signing assets
if: runner.os == 'macOS'
shell: bash
env:
APPLE_CERT_P12_BASE64: ${{ secrets.APPLE_CERT_P12_BASE64 }}
APPLE_CERT_PASSWORD: ${{ secrets.APPLE_CERT_PASSWORD }}
APPLE_API_KEY_P8: ${{ secrets.APPLE_API_KEY_P8 }}
APPLE_API_KEY_ID: ${{ secrets.APPLE_API_KEY_ID }}
APPLE_API_ISSUER: ${{ secrets.APPLE_API_ISSUER }}
APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
run: |
if [[ -z "$APPLE_CERT_P12_BASE64" ]]; then
echo "Missing required secret: APPLE_CERT_P12_BASE64" >&2
exit 1
fi
if [[ -z "$APPLE_CERT_PASSWORD" ]]; then
echo "Missing required secret: APPLE_CERT_PASSWORD" >&2
exit 1
fi
if [[ -z "$APPLE_API_KEY_P8" ]]; then
echo "Missing required secret: APPLE_API_KEY_P8" >&2
exit 1
fi
if [[ -z "$APPLE_API_KEY_ID" ]]; then
echo "Missing required secret: APPLE_API_KEY_ID" >&2
exit 1
fi
if [[ -z "$APPLE_API_ISSUER" ]]; then
echo "Missing required secret: APPLE_API_ISSUER" >&2
exit 1
fi
if [[ -z "$APPLE_TEAM_ID" ]]; then
echo "Missing required secret: APPLE_TEAM_ID" >&2
exit 1
fi
CERT_PATH="$RUNNER_TEMP/apple-signing.p12"
API_KEY_PATH="$RUNNER_TEMP/AuthKey_${APPLE_API_KEY_ID}.p8"
echo "$APPLE_CERT_P12_BASE64" | base64 --decode > "$CERT_PATH"
printf '%s' "$APPLE_API_KEY_P8" > "$API_KEY_PATH"
echo "CSC_LINK=$CERT_PATH" >> "$GITHUB_ENV"
echo "CSC_KEY_PASSWORD=$APPLE_CERT_PASSWORD" >> "$GITHUB_ENV"
echo "APPLE_API_KEY=$API_KEY_PATH" >> "$GITHUB_ENV"
echo "APPLE_API_KEY_ID=$APPLE_API_KEY_ID" >> "$GITHUB_ENV"
echo "APPLE_API_ISSUER=$APPLE_API_ISSUER" >> "$GITHUB_ENV"
echo "APPLE_TEAM_ID=$APPLE_TEAM_ID" >> "$GITHUB_ENV"
- name: Build and publish release artifacts
env:
GH_TOKEN: ${{ github.token }}