Chore: Mac binary signing tweaks for embedded plugins (#7988)

laurent22 · Mar 30, 2023 · cf40089 · cf40089
1 parent d67818d
commit cf40089
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 2 deletions.
diff --git a/.github/scripts/run_ci.sh b/.github/scripts/run_ci.sh
@@ -180,8 +180,8 @@ cd "$ROOT_DIR/packages/app-desktop"
 
 if [[ $GIT_TAG_NAME = v* ]]; then
 	echo "Step: Building and publishing desktop application..."
-	# cd "$ROOT_DIR/packages/tools"
-	# node bundleDefaultPlugins.js
+	cd "$ROOT_DIR/packages/tools"
+	node bundleDefaultPlugins.js
 	cd "$ROOT_DIR/packages/app-desktop"
 	USE_HARD_LINKS=false yarn run dist
 elif [[ $IS_LINUX = 1 ]] && [[ $GIT_TAG_NAME = $SERVER_TAG_PREFIX-* ]]; then

diff --git a/packages/app-desktop/build-mac/entitlements.mac.inherit.plist b/packages/app-desktop/build-mac/entitlements.mac.inherit.plist
@@ -8,5 +8,7 @@
 		<true/>
 		<key>com.apple.security.cs.allow-dyld-environment-variables</key>
 		<true/>
+		<key>com.apple.security.cs.disable-library-validation</key>
+		<true/>
 	</dict>
 </plist>
diff --git a/packages/app-desktop/package.json b/packages/app-desktop/package.json
@@ -79,7 +79,9 @@
       "icon": "../../Assets/macOs.icns",
       "target": "dmg",
       "hardenedRuntime": true,
+      "gatekeeperAssess": false,
       "entitlements": "./build-mac/entitlements.mac.inherit.plist",
+      "entitlementsInherit": "./build-mac/entitlements.mac.inherit.plist",
       "extendInfo": {
         "CFBundleURLTypes": [
           {