liangsheng8708
/
ruffle
mirror of https://mirror.ghproxy.com/https://github.com/ruffle-rs/ruffle.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

build: Add a workflow for signing the app bundle with a set of entitlements

This commit is contained in:
David Wendt 2022-03-18 19:28:01 -06:00 committed by kmeisthax
parent cc3d4f7638
commit c877bfe886
2 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
.github/workflows/release_nightly.yml vendored
View File

@ -204,6 +204,21 @@ jobs:
mkdir package/Ruffle.app/Contents/Resources mkdir package/Ruffle.app/Contents/Resources
xcrun actool --compile package/Ruffle.app/Contents/Resources desktop/assets/Assets.xcassets --minimum-deployment-target 10.0 --platform macosx --warnings --errors --notices --include-all-app-icons xcrun actool --compile package/Ruffle.app/Contents/Resources desktop/assets/Assets.xcassets --minimum-deployment-target 10.0 --platform macosx --warnings --errors --notices --include-all-app-icons
- name: Sign bundle
continue-on-error: true
env:
APPLE_DEVELOPER_KEY: ${{ secrets.APPLE_DEVELOPER_KEY }}
APPLE_DEVELOPER_KEY_PASSWORD: ${{ secrets.APPLE_DEVELOPER_KEY_PASSWORD }}
run: |
echo $APPLE_DEVELOPER_KEY | base64 -decode > certificate.p12
security create-keychain -p correct-horse-battery-staple build.keychain
security default-keychain -s build.keychain
security unlock-keychain -p correct-horse-battery-staple build.keychain
security import certificate.p12 -k build.keychain -P $APPLE_DEVELOPER_KEY_PASSWORD -T /usr/bin/codesign
security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k correct-horse-battery-staple build.keychain
codesign -s ${{ secrets.APPLE_DEVELOPER_IDENTITY }} -f --entitlements desktop/assets/macOSEntitlements.plist package/Ruffle.app
codesign --verify -vvvv package/Ruffle.app
- name: Package macOS - name: Package macOS
run: | run: |
# We must enter the package/ directory in order to create a flat tarball (i.e. without a directory in it). # We must enter the package/ directory in order to create a flat tarball (i.e. without a directory in it).

5
desktop/assets/macOSEntitlements.plist Normal file
View File

@ -0,0 +1,5 @@
<?xml version="1.0" encoding="utf-8"?>
<plist version="1.0">
<dict>
</dict>
</plist>