@@ -144,14 +144,38 @@ jobs:
144144 security default-keychain -d user -s "$keychain_path"
145145 security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "$KEYCHAIN_PASSWORD" "$keychain_path"
146146
147+ - name : Resolve Apple signing identity
148+ if : matrix.platform == 'macos'
149+ shell : bash
150+ run : |
151+ keychain_path="$RUNNER_TEMP/codelegate-release.keychain-db"
152+ cert_info="$(security find-identity -v -p codesigning "$keychain_path" | grep "Developer ID Application" | head -n 1)"
153+
154+ if [[ -z "$cert_info" ]]; then
155+ echo "No Developer ID Application signing identity found in temporary keychain"
156+ security find-identity -v -p codesigning "$keychain_path" || true
157+ exit 1
158+ fi
159+
160+ signing_identity="$(echo "$cert_info" | awk -F'"' '{print $2}')"
161+
162+ if [[ -z "$signing_identity" ]]; then
163+ echo "Unable to extract signing identity from keychain entry"
164+ echo "$cert_info"
165+ exit 1
166+ fi
167+
168+ echo "APPLE_SIGNING_IDENTITY=$signing_identity" >> "$GITHUB_ENV"
169+
147170 - name : Build and publish macOS release
148171 if : matrix.platform == 'macos'
149- uses : tauri-apps/tauri-action@v1
172+ uses : tauri-apps/tauri-action@action-v0.6.0
150173 env :
151174 APPLE_API_ISSUER : ${{ secrets.APPLE_API_ISSUER }}
152175 APPLE_API_KEY : ${{ secrets.APPLE_API_KEY }}
153176 APPLE_CERTIFICATE : ${{ secrets.APPLE_CERTIFICATE }}
154177 APPLE_CERTIFICATE_PASSWORD : ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
178+ APPLE_SIGNING_IDENTITY : ${{ env.APPLE_SIGNING_IDENTITY }}
155179 GITHUB_TOKEN : ${{ secrets.GITHUB_TOKEN }}
156180 with :
157181 projectPath : apps/desktop
@@ -165,7 +189,7 @@ jobs:
165189
166190 - name : Build and publish Linux release
167191 if : matrix.platform == 'linux'
168- uses : tauri-apps/tauri-action@v1
192+ uses : tauri-apps/tauri-action@action-v0.6.0
169193 env :
170194 GITHUB_TOKEN : ${{ secrets.GITHUB_TOKEN }}
171195 with :
0 commit comments