wehub-resource-sync
a06f331eb8
CI / benchmark (push) Has been skipped
install-script / posix-syntax (push) Successful in 6m1s
CI / build-onnx (push) Failing after 6m43s
init-smoke / dry-run (push) Failing after 15m57s
security / govulncheck (push) Has been cancelled
security / trivy-fs (push) Has been cancelled
CI / test (1.26, ubuntu-latest) (push) Has been cancelled
Scorecard supply-chain security / Scorecard analysis (push) Has been cancelled
CI / test (1.26, macos-latest) (push) Has been cancelled
CI / build-windows (push) Has been cancelled
CI / lint (push) Has been cancelled
install-script / powershell-syntax (push) Has been cancelled
install-script / install (macos-14) (push) Has been cancelled
install-script / install (ubuntu-latest) (push) Has been cancelled
22 lines
782 B
Bash
Executable File
22 lines
782 B
Bash
Executable File
#!/bin/sh
|
|
# Goreleaser build hook: codesigns darwin Mach-O binaries with rcodesign
|
|
# so they survive macOS Gatekeeper / notary checks. No-op on non-darwin
|
|
# targets — the hook fires for every {goos, goarch} pair, and we gate on
|
|
# the first arg ($1 = template "{{ .Os }}").
|
|
#
|
|
# Expects the workflow step to have populated MACOS_SIGNING_DIR with:
|
|
# rcodesign — apple-codesign linux-musl binary
|
|
# cert.p12 — Developer ID Application certificate
|
|
# cert.pass — P12 export password (newline-free)
|
|
set -eu
|
|
|
|
[ "$1" = darwin ] || exit 0
|
|
|
|
SIGNING_DIR="${MACOS_SIGNING_DIR:-/tmp/macos-signing}"
|
|
|
|
exec "$SIGNING_DIR/rcodesign" sign \
|
|
--p12-file "$SIGNING_DIR/cert.p12" \
|
|
--p12-password-file "$SIGNING_DIR/cert.pass" \
|
|
--code-signature-flags runtime \
|
|
"$2"
|