create certs

.github/workflows/macos-build-gui-executable.yml

@@ -45,10 +45,6 @@ jobs:
         python -m pipenv lock --keep-outdated
         python -m pipenv install --dev
 
-    - name: Create macos app
-      run: |
-        pipenv run pyinstaller pyinstaller_spec/empress_gui_app.spec
-
     - name: Import codesign certificate to keychain
       # Codesign and notarize app so that we don't have to go to Security and Privacy to
       # allow the app to run.
@@ -69,13 +65,17 @@ jobs:
         security import $CERTIFICATE_PATH -P $P12_PASSWORD -A -t cert -f pkcs12 -k $KEYCHAIN_PATH
         security list-keychain -d user -s $KEYCHAIN_PATH
 
-    - name: Codesign macOS app
+    - name: Create macos app
       run: |
-        echo "turn off prompts for codesign and xcrun"
-        security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k $KEYCHAIN_PASSWORD $KEYCHAIN_PATH
+        pipenv run pyinstaller pyinstaller_spec/empress_gui_app.spec --codesign-identity "Developer ID Application: Santi Santichaivekin (M54SBHVQL6)"
+
+    # - name: Codesign macOS app
+    #   run: |
+    #     echo "turn off prompts for codesign and xcrun"
+    #     security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k $KEYCHAIN_PASSWORD $KEYCHAIN_PATH
 
-        echo "sign the application"
-        codesign -s Developer -v --deep --timestamp --entitlements ./pyinstaller_spec/macos_entitlements.plist -o runtime ./dist/empress.app
+    #     echo "sign the application"
+    #     codesign -s Developer -v --deep --timestamp --entitlements ./pyinstaller_spec/macos_entitlements.plist -o runtime ./dist/empress.app
 
     - name: Compress macos app
       run: |