aleleba/figcraft
1
0
Fork 0
mirror of https://github.com/storytold/figcraft.git synced 2026-10-26 03:16:53 -06:00
Code Issues Packages Projects Releases Wiki Activity

macOS signing: keep the temporary keychain until the build has signed with it

Browse Source 
import-cert.sh deleted its whole private temp directory on exit, and the keychain lives there, so codesign failed with "The specified item could not be found in the keychain" in the release build.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Brandon Thomas
2026-10-25 09:14:05 -04:00
co-authored by Claude Opus 5.5
parent 32b836fbc5
commit 4b76c407d5
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packaging/macos/import-cert.sh
+3 -1
View File
@@ -19,7 +19,9 @@ fi
TMP_BASE="${RUNNER_TEMP:-${TMPDIR:-/tmp}}"
TMP="$(mktemp -d "${TMP_BASE}/figcraft-signing.XXXXXX")"
trap 'rm -rf "$TMP"' EXIT
# Remove only the decoded certificate: the keychain lives in the same directory and codesign
# needs it until the workflow's "Remove temporary keychain" step deletes it.
trap 'rm -f "${CERT:-}"' EXIT
KEYCHAIN="$TMP/figcraft-signing.keychain-db"
CERT="$TMP/figcraft-signing.p12"
KC_PASS="${KEYCHAIN_PASSWORD:-$(openssl rand -hex 24)}"