GHA: Sign binaries required signature. Invalidate cache for ls ext snapshot.

This commit is contained in:
aboyko
2023-11-17 20:46:57 -05:00
parent 6a1b8c5e35
commit 9b31b8008f
2 changed files with 7 additions and 4 deletions

View File

@@ -17,8 +17,11 @@ tar -zxf $file --directory ${dir}/${destination_folder_name}
echo "Successfully extracted ${filename}"
# sign problematic binaries
find ${dir}/${destination_folder_name}/SpringToolSuite4.app -print | grep ".*/libjansi\.jnilib$" | codesign --verbose --deep --force --timestamp --entitlements "${entitlements}" --options=runtime --keychain "${KEYCHAIN}" -s "${MACOS_CERTIFICATE_ID}"
find ${dir}/${destination_folder_name}/SpringToolSuite4.app -print | grep ".*/fsevents\.node$" | codesign --verbose --deep --force --timestamp --entitlements "${entitlements}" --options=runtime --keychain "${KEYCHAIN}" -s "${MACOS_CERTIFICATE_ID}"
for file in `find ${dir}/${destination_folder_name}/SpringToolSuite4.app -print | grep -E ".*/(libjansi\.jnilib|fsevents\.node)$"`
do
echo "Signing binary file: ${file}"
codesign --verbose --deep --force --timestamp --entitlements "${entitlements}" --options=runtime --keychain "${KEYCHAIN}" -s "${MACOS_CERTIFICATE_ID}" $file
done
# Sign the app
codesign --verbose --deep --force --timestamp --entitlements "${entitlements}" --options=runtime --keychain "${KEYCHAIN}" -s "${MACOS_CERTIFICATE_ID}" ${dir}/${destination_folder_name}/SpringToolSuite4.app