@pablozaiden/installer 0.0.7 → 0.0.9
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +13 -0
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -253,6 +253,9 @@ jobs:
|
|
|
253
253
|
uses: pablozaiden/installer/.github/workflows/reusable-binary-release.yml@main
|
|
254
254
|
permissions:
|
|
255
255
|
contents: write
|
|
256
|
+
secrets:
|
|
257
|
+
macos_signing_certificate_base64: ${{ secrets.MACOS_SIGNING_CERTIFICATE_BASE64 }}
|
|
258
|
+
macos_signing_certificate_password: ${{ secrets.MACOS_SIGNING_CERTIFICATE_PASSWORD }}
|
|
256
259
|
with:
|
|
257
260
|
prebuild_command: bun run build
|
|
258
261
|
binaries: |
|
|
@@ -266,6 +269,16 @@ jobs:
|
|
|
266
269
|
]
|
|
267
270
|
```
|
|
268
271
|
|
|
272
|
+
When both macOS signing secrets are provided, the workflow imports the
|
|
273
|
+
Base64-encoded PKCS#12 certificate into a temporary keychain on each macOS
|
|
274
|
+
runner and signs every macOS binary before staging it. The password is never
|
|
275
|
+
written to the workflow environment after keychain setup. If neither secret is
|
|
276
|
+
provided, macOS artifacts remain unsigned; providing only one secret fails the
|
|
277
|
+
macOS job. The PKCS#12 must contain the code-signing certificate and its private key.
|
|
278
|
+
The workflow trusts that certificate for code signing on the ephemeral runner;
|
|
279
|
+
self-signed certificates are supported when their certificate and private key
|
|
280
|
+
are supplied together.
|
|
281
|
+
|
|
269
282
|
For a project with multiple binaries:
|
|
270
283
|
|
|
271
284
|
```yaml
|