[MAC] Fix missing entitlements file

gama-platform · Oct 5, 2021 · dff9a4c · dff9a4c
1 parent 1a5e810
commit dff9a4c
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 6 deletions.
diff --git a/.github/workflows/github-travis.yml b/.github/workflows/github-travis.yml
@@ -63,7 +63,9 @@ jobs:
 
       # cf https://github.com/actions/upload-artifact/issues/246
       - name: Move artefacts to root tree
-        run: mv ${{ github.workspace }}/ummisco.gama.product/target/products/Gama*zip ${{ github.workspace }}
+        run: |
+          mv ${{ github.workspace }}/ummisco.gama.product/target/products/Gama*zip ${{ github.workspace }}
+          mv ${{ github.workspace }}/ummisco.gama.product/extraresources/entitlements.plist ${{ github.workspace }}
 
       - uses: actions/upload-artifact@v2
         if: env.CONTINUE == 'true'
@@ -120,6 +122,8 @@ jobs:
           NOTARY_APPLE_ID: ${{ secrets.NOTARY_APPLE_ID }}
           NOTARY_PASSWORD: ${{ secrets.NOTARY_PASSWORD }}
           NOTARY_TEAM_ID: ${{ secrets.NOTARY_TEAM_ID }}
+          # Scripts
+          GITHUB_WORKSPACE: ${{ github.workspace }}
         run: |
           # Unlock
           security unlock-keychain -p "$MACOS_KEYCHAIN_PWD" build.keychain
@@ -144,6 +148,8 @@ jobs:
           NOTARY_APPLE_ID: ${{ secrets.NOTARY_APPLE_ID }}
           NOTARY_PASSWORD: ${{ secrets.NOTARY_PASSWORD }}
           NOTARY_TEAM_ID: ${{ secrets.NOTARY_TEAM_ID }}
+          # Scripts
+          GITHUB_WORKSPACE: ${{ github.workspace }}
         run: |
           # Unlock
           security unlock-keychain -p "$MACOS_KEYCHAIN_PWD" build.keychain

diff --git a/travis/mac-sign.sh b/travis/mac-sign.sh
@@ -1,7 +1,5 @@
 #!/bin/bash
 
-IDENTITY=""
-
 function signInJar(){
     local f
 
@@ -23,7 +21,7 @@ function signInJar(){
             cd ".." && rm -fr "_sub"
         else
             codesign --remove-signature -v "$f"
-            codesign --timestamp --force -s "$IDENTITY" -v "$f"
+            codesign --timestamp --force -s "$MACOS_DEV_ID" -v "$f"
             echo "---"
         fi
 
@@ -45,7 +43,7 @@ done < jarlist.txt
 
 # Sign single lib files
 find ./ \( -name "*dylib" -o -name "*.so" -o -name "*.jnilib" \) -exec codesign --remove-signature -v {} \;
-find ./ \( -name "*dylib" -o -name "*.so" -o -name "*.jnilib" \) -exec codesign --timestamp --force -s "$IDENTITY" -v {} \;
+find ./ \( -name "*dylib" -o -name "*.so" -o -name "*.jnilib" \) -exec codesign --timestamp --force -s "$MACOS_DEV_ID" -v {} \;
 
 # Sign GAMA compiled file
-codesign --entitlements "$GITHUB_WORKSPACE/ummisco.gama.product/extraresources/entitlements.plist" --timestamp --options=runtime --force -s "$IDENTITY" -v ./Gama.app/Contents/MacOS/Gama
+codesign --entitlements "$GITHUB_WORKSPACE/artifacts/entitlements.plist" --timestamp --options=runtime --force -s "$MACOS_DEV_ID" -v ./Gama.app/Contents/MacOS/Gama