GHA: Sign binaries required signature. Invalidate cache for ls ext snapshot.

This commit is contained in:
aboyko
2023-11-17 18:54:12 -05:00
parent fb77fdeb9b
commit 65a92bdc70
3 changed files with 7 additions and 1 deletions

View File

@@ -16,6 +16,11 @@ mkdir ${dir}/${destination_folder_name}
tar -zxf $file --directory ${dir}/${destination_folder_name}
echo "Successfully extracted ${filename}"
# sign problematic binaries
find ${dir}/${destination_folder_name}/SpringToolSuite4.app -print | grep ".*/libjansi\.jnilib$" | codesign --verbose --deep --force --timestamp --entitlements "${entitlements}" --options=runtime --keychain "${KEYCHAIN}" -s "${MACOS_CERTIFICATE_ID}"
find ${dir}/${destination_folder_name}/SpringToolSuite4.app -print | grep ".*/fsevents\.node$" | codesign --verbose --deep --force --timestamp --entitlements "${entitlements}" --options=runtime --keychain "${KEYCHAIN}" -s "${MACOS_CERTIFICATE_ID}"
# Sign the app
codesign --verbose --deep --force --timestamp --entitlements "${entitlements}" --options=runtime --keychain "${KEYCHAIN}" -s "${MACOS_CERTIFICATE_ID}" ${dir}/${destination_folder_name}/SpringToolSuite4.app
cd ${dir}/${destination_folder_name}

View File

@@ -124,7 +124,7 @@ jobs:
purge_cache:
needs: [ eclipse-language-servers-build ]
if: ${{ inputs.build_type != 'snapshot' }}
# if: ${{ inputs.build_type != 'snapshot' }}
runs-on: [self-hosted, macOS]
steps:
- uses: ./.github/actions/akamai-purge-osx

View File

@@ -266,6 +266,7 @@ jobs:
do
${{ github.workspace }}/.github/scripts/notarize-osx-distro-file.sh $dmg_file $NOTARIZE_PROFILE &
done
FAIL=0
for job in `jobs -p`
do
wait $job || let "FAIL+=1"