more signing for notarization
@@ -49,20 +49,26 @@ jobs:
- name: 'install gon'
run: go install github.com/mitchellh/gon/...@v0.2.3
- name: 'build couper'
- run: go build -race -o ./.macos/Couper.app/Contents/MacOS/couper main.go
+ run: go build -race -o ./.macos/Couper.app/Contents/couper main.go
- name: 'cleanup finder attributes'
run: xattr -c ./.macos/Couper.app/Contents/info.plist
- name: 'verify identity'
run: security find-identity -v
- name: 'sign couper binary'
- run: codesign --deep -s "4B8FA10CCB8F16F9F464385768D82645831F4644" -f -v --timestamp --options runtime --entitlements ./.macos/entitlements.plist ./.macos/Couper.app/Contents/MacOS/couper
+ run: codesign --deep -s "4B8FA10CCB8F16F9F464385768D82645831F4644" -f -v --timestamp --options runtime --entitlements ./.macos/entitlements.plist ./.macos/Couper.app/Contents/couper
- name: 'create macOS dmg with signed binary'
run: cd .macos && go run make.go && cd ..
+ - name: 'sign couper image'
+ run: codesign --force --deep -s "4B8FA10CCB8F16F9F464385768D82645831F4644" -f -v --timestamp --entitlements ./.macos/entitlements.plist ./.macos/couper.dmg
- name: 'create signed binary zip-file' # keep utf8 things with ditto
- run: ditto -c -k --sequesterRsrc ./.macos/Couper.app/Contents/MacOS/couper ./.macos/couper.zip
+ run: ditto -c -k --sequesterRsrc ./.macos/Couper.app/Contents/couper ./.macos/couper.zip
+ - name: 'sign couper archive'
+ run: codesign --deep -s "4B8FA10CCB8F16F9F464385768D82645831F4644" -f -v --timestamp --entitlements ./.macos/entitlements.plist ./.macos/couper.zip
- name: 'notarize and stable'
run: gon -log-level=info -log-json ./.gon.hcl
- - name: 'verify notarization'
- run: spctl -vvv --assess --type exec ./.macos/Couper.app/Contents/MacOS/couper
+ - name: 'verify image notarization'
+ run: spctl -vvv --assess --type exec ./.macos/couper.dmg
+ - name: 'verify archive notarization'
+ run: spctl -vvv --assess --type exec ./.macos/couper.zip
# - name: 'entitlement format'
# run: plutil -convert xml1 .macos/entitlements.plist && plutil -lint .macos/entitlements.plist
