From fcaef0869fbd9afd694c90183ad2218d8dac22de Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Felix=20F=C3=B6rtsch?= Date: Sun, 24 May 2026 19:40:13 +0200 Subject: [PATCH] allow codesign access to imported p12 key --- .gitea/workflows/custom-release.yml | 2 +- scripts/tests/test-custom-release-macos-runner.bats | 3 +++ 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/.gitea/workflows/custom-release.yml b/.gitea/workflows/custom-release.yml index 053290e1b..d6b455c91 100644 --- a/.gitea/workflows/custom-release.yml +++ b/.gitea/workflows/custom-release.yml @@ -68,7 +68,7 @@ jobs: security create-keychain -p "$keychain_password" "$keychain_path" security set-keychain-settings -lut 21600 "$keychain_path" security unlock-keychain -p "$keychain_password" "$keychain_path" - security import "$certificate_path" -k "$keychain_path" -P "$DEVELOPER_ID_APPLICATION_P12_PASSWORD" -T /usr/bin/codesign -T /usr/bin/security + security import "$certificate_path" -k "$keychain_path" -P "$DEVELOPER_ID_APPLICATION_P12_PASSWORD" -A -T /usr/bin/codesign -T /usr/bin/security security list-keychains -d user -s "$keychain_path" $(security list-keychains -d user | sed 's/[ "]//g') security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "$keychain_password" "$keychain_path" identity_output="$(security find-identity -v -p codesigning "$keychain_path")" diff --git a/scripts/tests/test-custom-release-macos-runner.bats b/scripts/tests/test-custom-release-macos-runner.bats index 490941fe2..dfd244131 100644 --- a/scripts/tests/test-custom-release-macos-runner.bats +++ b/scripts/tests/test-custom-release-macos-runner.bats @@ -41,6 +41,9 @@ setup() { run rg -n 'security import .* -P "\$DEVELOPER_ID_APPLICATION_P12_PASSWORD"' "$WORKFLOW" [ "$status" -eq 0 ] + run rg -n 'security import .* -A ' "$WORKFLOW" + [ "$status" -eq 0 ] + run rg -n 'security find-identity -v -p codesigning "\$keychain_path"' "$WORKFLOW" [ "$status" -eq 0 ]