allow passwordless developer id p12

.gitea/workflows/custom-release.yml

@@ -63,10 +63,6 @@ jobs:
             echo "DEVELOPER_ID_APPLICATION_P12_BASE64 secret is required" >&2
             exit 1
           fi
-          if [ -z "$DEVELOPER_ID_APPLICATION_P12_PASSWORD" ]; then
-            echo "DEVELOPER_ID_APPLICATION_P12_PASSWORD secret is required" >&2
-            exit 1
-          fi
 
           printf '%s' "$DEVELOPER_ID_APPLICATION_P12_BASE64" | base64 -D > "$certificate_path"
           security create-keychain -p "$keychain_password" "$keychain_path"

scripts/tests/test-custom-release-macos-runner.bats

@@ -36,6 +36,9 @@ setup() {
 	[ "$status" -eq 0 ]
 
 	run rg -n 'DEVELOPER_ID_APPLICATION_P12_PASSWORD secret is required' "$WORKFLOW"
+	[ "$status" -ne 0 ]
+
+	run rg -n 'security import .* -P "\$DEVELOPER_ID_APPLICATION_P12_PASSWORD"' "$WORKFLOW"
 	[ "$status" -eq 0 ]
 
 	run rg -n 'security create-keychain' "$WORKFLOW"