From 213730055fad2ff6e5b5c5dcdcaa52c7ac7407ce Mon Sep 17 00:00:00 2001
From: aboyko <aboyko@vmware.com>
Date: Sat, 18 Nov 2023 01:44:56 -0500
Subject: [PATCH] GHA: Sign binaries inside kotlin-compiler jar

---
 .github/scripts/sign-osx-distro-file.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/scripts/sign-osx-distro-file.sh b/.github/scripts/sign-osx-distro-file.sh
index f3e20c37a..6fde0f002 100755
--- a/.github/scripts/sign-osx-distro-file.sh
+++ b/.github/scripts/sign-osx-distro-file.sh
@@ -27,6 +27,8 @@ done
 for f in `find ${dir}/${destination_folder_name}/SpringToolSuite4.app -type f | grep -E ".*/kotlin-compiler-embeddable.*\.jar$"`
 do
   ./sign-jnilib-files-inside-jar.sh $f $entitlements
+  echo "Signing binary file: ${f}"
+  codesign --verbose --deep --force --timestamp --entitlements "${entitlements}" --options=runtime --keychain "${KEYCHAIN}" -s "${MACOS_CERTIFICATE_ID}" $f
 done
 
 # Sign the app