unlock imported signing keychain during release
custom release / build-custom-release (push) Successful in 10s

This commit is contained in:
2026-05-24 19:12:59 +02:00
parent 55f5a70ff5
commit cda7f54a48
3 changed files with 14 additions and 0 deletions
+4
View File
@@ -304,6 +304,10 @@ sign_and_validate_darwin_binary() {
codesign_args=(--force --sign "$codesign_identity" --options runtime --timestamp)
if [[ -n "${CUSTOM_RELEASE_KEYCHAIN_PATH:-}" ]]; then
if [[ -n "${CUSTOM_RELEASE_KEYCHAIN_PASSWORD:-}" ]]; then
security unlock-keychain -p "$CUSTOM_RELEASE_KEYCHAIN_PASSWORD" "$CUSTOM_RELEASE_KEYCHAIN_PATH"
fi
security find-identity -v -p codesigning "$CUSTOM_RELEASE_KEYCHAIN_PATH"
codesign_args+=(--keychain "$CUSTOM_RELEASE_KEYCHAIN_PATH")
fi
codesign "${codesign_args[@]}" "$binary"