Discharge7443/fleet
1
0
Fork 0
Code Issues Pull Requests Actions 5 Packages Projects Releases Wiki Activity

sign fleetctl for macOS during releases (#16670)

Browse Source 
possible approach to solve #16664

---------

Co-authored-by: Luke Heath <luke@fleetdm.com>
This commit is contained in:
Roberto Dip
2024-04-19 14:36:30 -03:00
committed by GitHub
co-authored by Luke Heath
parent 4bde12e8a5
commit d677546e04
3 changed files with 65 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/goreleaser-fleet.yaml
+19
View File
@@ -58,6 +58,20 @@ jobs:
- name: Install Go Dependencies
run: make deps-go
- name: Install macOS signing + notarization tools
run: |
pushd /tmp
readonly version="0.27.0"
readonly codesign_package="apple-codesign-${version}-x86_64-unknown-linux-musl.tar.gz"
curl -O -L "https://github.com/indygreg/apple-platform-rs/releases/download/apple-codesign%2F${version}/${codesign_package}"
curl -O -L "https://github.com/indygreg/apple-platform-rs/releases/download/apple-codesign%2F${version}/${codesign_package}.sha256"
echo "$(cat $codesign_package.sha256) $codesign_package" | sha256sum --quiet --strict --check -
tar --extract --strip-components 1 --file "$codesign_package"
mkdir -p $HOME/.bin
mv rcodesign $HOME/.bin/
echo "$HOME/.bin" >> $GITHUB_PATH
popd
- name: Run GoReleaser
uses: goreleaser/goreleaser-action@f82d6c1c344bcacabba2c841718984797f664a6b
with:
@@ -67,6 +81,11 @@ jobs:
env:
GORELEASER_KEY: ${{ secrets.GORELEASER_KEY }}
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
APPLE_APPLICATION_CERTIFICATE: ${{ secrets.APPLE_APPLICATION_CERTIFICATE }}
APPLE_APPLICATION_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_APPLICATION_CERTIFICATE_PASSWORD }}
APPLE_APP_STORE_CONNECT_KEY: ${{ secrets.APPLE_APP_STORE_CONNECT_KEY }}
APPLE_APP_STORE_CONNECT_KEY_ID: ${{ secrets.APPLE_APP_STORE_CONNECT_KEY_ID }}
APPLE_APP_STORE_CONNECT_ISSUER_ID: ${{ secrets.APPLE_APP_STORE_CONNECT_ISSUER_ID }}
- name: Get tag
run: |