GHA: Sign binaries inside kotlin-compiler jar

.github/scripts/sign-osx-distro-file.sh

@@ -4,6 +4,7 @@ set -e
 file=$1
 entitlements=$2
 icns=$3
+
 filename="$(basename -- $file)"
 dir="$(dirname "$file")"
 
@@ -26,7 +27,23 @@ done
 # sign libjansi.jnilib inside kotlin-compiler-embeddable.jar
 for f in `find ${dir}/${destination_folder_name}/SpringToolSuite4.app -type f | grep -E ".*/kotlin-compiler-embeddable.*\.jar$"`
 do
-  ./sign-jnilib-files-inside-jar.sh $f $entitlements
+  echo "Looking for 'libjansi.jnilib' files inside ${f} to sign..."
+  f_name="$(basename -- $f)"
+  extracted_jar_dir=extracted_${f_name}
+  rm -rf $extracted_jar_dir
+  mkdir $extracted_jar_dir
+  echo "Extracting archive ${f}"
+  unzip -q $f -d ./${extracted_jar_dir}
+  for jnilib_file in `find $extracted_jar_dir -type f | grep -E ".*/libjansi\.jnilib$"`
+  do
+    echo "Signing binary file: ${jnilib_file}"
+    codesign --verbose --deep --force --timestamp --entitlements "${entitlements}" --options=runtime --keychain "${KEYCHAIN}" -s "${MACOS_CERTIFICATE_ID}" $jnilib_file
+  done
+  cd $extracted_jar_dir
+  zip -r -u $f .
+  cd ..
+  rm -rf $extracted_jar_dir
+
   echo "Signing binary file: ${f}"
   codesign --verbose --deep --force --timestamp --entitlements "${entitlements}" --options=runtime --keychain "${KEYCHAIN}" -s "${MACOS_CERTIFICATE_ID}" $f
 done