Skip to content

ci: make macOS proof keychains idempotent - #407

Merged
Jesssullivan merged 1 commit into
mainfrom
jess/notary-proof-keychain-idempotent
May 19, 2026
Merged

ci: make macOS proof keychains idempotent#407
Jesssullivan merged 1 commit into
mainfrom
jess/notary-proof-keychain-idempotent

Conversation

@Jesssullivan

Copy link
Copy Markdown
Owner

Summary

  • use run-scoped signing keychain paths in the macOS FileProvider package proof
  • tolerate duplicate CA-chain imports when a self-hosted runner/keychain already has the certificate
  • keeps the proof rerunnable on PZM after failed attempts

Verification

  • git diff --check

Tracking

  • TIN-1547 diagnostic package build
  • failed run 26115143547 reached dependency install but stopped at signing import with SecKeychainItemImport: The specified item already exists in the keychain

@Jesssullivan
Jesssullivan merged commit ebd5eb8 into main May 19, 2026
14 of 15 checks passed
@Jesssullivan
Jesssullivan deleted the jess/notary-proof-keychain-idempotent branch May 19, 2026 18:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant