File tree 1 file changed +5
-4
lines changed
1 file changed +5
-4
lines changed Original file line number Diff line number Diff line change @@ -58,13 +58,14 @@ jobs:
58
58
env :
59
59
KEYCHAIN : " sign.keychain"
60
60
INSTALLER_CERT_MAC_PATH : " /tmp/ArduinoCerts2020.p12"
61
+ KEYCHAIN_PASSWORD : keychainpassword # Arbitrary password for a keychain that exists only for the duration of the job, so not secret
61
62
run : |
62
63
echo "${{ secrets.INSTALLER_CERT_MAC_P12 }}" | base64 --decode > ${{ env.INSTALLER_CERT_MAC_PATH }}
63
- security create-keychain -p ${{ secrets .KEYCHAIN_PASSWORD }} ${{ env.KEYCHAIN }}
64
+ security create-keychain -p ${{ env .KEYCHAIN_PASSWORD }} ${{ env.KEYCHAIN }}
64
65
security default-keychain -s ${{ env.KEYCHAIN }}
65
- security unlock-keychain -p ${{ secrets .KEYCHAIN_PASSWORD }} ${{ env.KEYCHAIN }}
66
- security import ${{ env.INSTALLER_CERT_MAC_PATH }} -k ${{ env.KEYCHAIN }} -f pkcs12 -A -T /usr/bin/codesign -P ${{ secrets.INSTALLER_CERT_MAC_PASSWORD }}
67
- security set-key-partition-list -S apple-tool:,apple: -s -k ${{ secrets .KEYCHAIN_PASSWORD }} ${{ env.KEYCHAIN }}
66
+ security unlock-keychain -p ${{ env .KEYCHAIN_PASSWORD }} ${{ env.KEYCHAIN }}
67
+ security import ${{ env.INSTALLER_CERT_MAC_PATH }} -k ${{ env.KEYCHAIN }} -f pkcs12 -A -T /usr/bin/codesign -P " ${{ secrets.INSTALLER_CERT_MAC_PASSWORD }}"
68
+ security set-key-partition-list -S apple-tool:,apple: -s -k ${{ env .KEYCHAIN_PASSWORD }} ${{ env.KEYCHAIN }}
68
69
69
70
- name : Install gon for code signing and app notarization
70
71
run : |
You can’t perform that action at this time.
0 commit comments