Skip to content

Repository navigation

feat: build, sign and notarize macOS app bundle in CI #2614

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ansgarbecker merged 6 commits into from
Sep 28, 2026
Merged

feat: build, sign and notarize macOS app bundle in CI #2614

Changes from 1 commit
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
b2f44f0
feat: build, sign and notarize macOS app bundle in CI
mistral-vibe Sep 27, 2026
e5076e6
fix: move secrets check from step if: into script (secrets context no…
mistral-vibe Sep 27, 2026
a2b588a
fix: use plain string for codesign flags instead of empty array (set …
mistral-vibe Sep 27, 2026
60e48f3
chore: trigger CI with signing secrets configured
mistral-vibe Sep 28, 2026
0b09691
fix: correct argument order for security set-keychain-settings
mistral-vibe Sep 28, 2026
fe5f5bb
fix: remove invalid -s flag from security set-key-partition-list
mistral-vibe Sep 28, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
fix: move secrets check from step if: into script (secrets context no… 
…t allowed in if:)

Co-authored-by: ansgarbecker <ansgarbecker@users.noreply.github.com>
  • Loading branch information
@mistral-vibe @ansgarbecker
mistral-vibe and ansgarbecker committed Sep 27, 2026
commit e5076e6f4637c5a442beac3272c9ab07f3ead877
5 changes: 4 additions & 1 deletion .github/workflows/lazarus.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -200,11 +200,14 @@ jobs:
echo "$RUNNER_TEMP/lazarus" >> $GITHUB_PATH

- name: Import code signing certificate
if: ${{ secrets.MACOS_CERTIFICATE_P12_BASE64 != '' }}
env:
MACOS_CERTIFICATE_P12_BASE64: ${{ secrets.MACOS_CERTIFICATE_P12_BASE64 }}
MACOS_CERTIFICATE_PASSWORD: ${{ secrets.MACOS_CERTIFICATE_PASSWORD }}
run: |
if [ -z "${MACOS_CERTIFICATE_P12_BASE64}" ]; then
echo "No signing certificate configured, skipping keychain setup"
exit 0
fi
KEYCHAIN_PATH="$RUNNER_TEMP/signing.keychain-db"
KEYCHAIN_PASSWORD=$(uuidgen)
security create-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
Expand Down
Loading