Apply entitlements when signing vendored binaries

This commit is contained in:
Gregory Schier
2026-01-11 14:02:20 -08:00
parent 9fe077f598
commit 494e9efb64

View File

@@ -121,7 +121,8 @@ jobs:
# Sign vendored binaries with hardened runtime
codesign --force --options runtime --sign "$APPLE_SIGNING_IDENTITY" crates-tauri/yaak-app/vendored/protoc/yaakprotoc || true
codesign --force --options runtime --sign "$APPLE_SIGNING_IDENTITY" crates-tauri/yaak-app/vendored/node/yaaknode || true
# Node.js needs entitlements for JIT and loading plugins with different Team IDs
codesign --force --options runtime --entitlements crates-tauri/yaak-app/macos/entitlements.plist --sign "$APPLE_SIGNING_IDENTITY" crates-tauri/yaak-app/vendored/node/yaaknode || true
- uses: tauri-apps/tauri-action@v0
env: