Run codesign on osx-arm64

[isuruf]

No description provided.

[beckermr]

Does this pr sign all binaries or only those which have a prefixed replaced?

[isuruf]

Only those which have a prefixed replaced which is all binaries produced by the conda compilers.

[beckermr]

Ok. So we won't be able to sign things if we are doing binary repackaging?

[beckermr]

Or I should say, installing a thing from binary repackaging.

[isuruf]

Nope. That should be done in conda-build if binary_has_prefix_files is not turned off. (Usually binary repackages turn it off)

[beckermr]

Ok. So we do need the pr on conda build.

[beckermr]

What about statically linked binaries?

[isuruf]

Those have rpath in them if they were compiled using conda compilers, so they'll get replaced as well.

[erykoff]

Latest changes check if a file has been updated on whether it should do the signing. But we don't have any guarantee that it was signed in the first place, right? I think we either need to check if it has a valid signature (codesign -v file) or just sign everything.

[isuruf]

If a package was not updated here, that means there was something wrong with the metadata in the conda package. That code path should not be triggered at all, but I added it just in case.

[isuruf]

ping on this

[beckermr]

huzzah!

[erykoff]

Fantastic!

[github-actions]

Hi there, thank you for your contribution to Conda!

This pull request has been automatically locked since it has not had recent activity after it was closed.

Please open a new issue or pull request if needed.