Skip to content

feat(CLI): Add macOS binary signing using Apple Distribution certificate [STRINGS-1575]#829

Closed
Efe Bikmaz (bikmazefe) wants to merge 3 commits intomainfrom
strings-1575
Closed

feat(CLI): Add macOS binary signing using Apple Distribution certificate [STRINGS-1575]#829
Efe Bikmaz (bikmazefe) wants to merge 3 commits intomainfrom
strings-1575

Conversation

@bikmazefe
Copy link
Copy Markdown
Member

@bikmazefe Efe Bikmaz (bikmazefe) commented May 6, 2025

Add macOS binary signing using Apple Distribution certificate.

@bikmazefe Efe Bikmaz (bikmazefe) marked this pull request as ready for review May 6, 2025 13:46
Comment thread clients/cli/build/sign.sh
echo "$CERTIFICATE_BASE64" | base64 --decode -o "$CERTIFICATE_PATH"

# Create temporary keychain
security create-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do you need to run this inside a MacOS container to have the commands available?

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Very good and important point 😬 I assumed we were already doing it but confused it with the IOS SDK workflow.

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'll also need to fix the dist directory though, as we're signing them in a separate action now.

@jablan
Copy link
Copy Markdown
Collaborator

jablan commented May 7, 2025

Efe Bikmaz (@bikmazefe) is there a way to try this out before merging?

@bikmazefe
Copy link
Copy Markdown
Member Author

Efe Bikmaz (@bikmazefe) is there a way to try this out before merging?

jablan Yeah that's what I'm trying to find out currently. It seems like we can use the act library locally to simulate the GH workflow but we'd need to skip the actual signing part 🙁

Copy link
Copy Markdown
Collaborator

@jablan jablan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm up for trying it out in the repo, I guess the worst case it will fail so you'd have another fix(CLI) PR, or two.

@bikmazefe
Copy link
Copy Markdown
Member Author

Efe Bikmaz (bikmazefe) commented Jan 12, 2026

Closing in favor of #1002

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants