Sign artifacts

balena-io · Nov 9, 2023 · 3b7580f · 3b7580f
1 parent 253c346
commit 3b7580f
Show file tree

Hide file tree

Showing 2 changed files with 26 additions and 28 deletions.
diff --git a/afterSignHook.js b/afterSignHook.js
diff --git a/forge.config.ts b/forge.config.ts
@@ -16,6 +16,30 @@ web technologies to ensure flashing an SDCard or USB drive is a pleasant and saf
 experience. It protects you from accidentally writing to your hard-drives, ensures
 every byte of data was written correctly and much more.`;
 
+let osxSigningConfig: any = {};
+let winSigningConfig: any = {};
+
+if (process.env.NODE_ENV === 'production') {
+  osxSigningConfig.osxSign = {
+    optionsForFile: () => ({
+      entitlements: './entitlements.mac.plist',
+      hardenedRuntime: true,
+    }),
+  };
+
+  osxSigningConfig.osxNotarize = {
+    tool: 'notarytool',
+    appleId: process.env.XCODE_APP_LOADER_EMAIL,
+    appleIdPassword: process.env.XCODE_APP_LOADER_PASSWORD,
+    teamId: process.env.XCODE_APP_LOADER_TEAM_ID,
+  };
+
+  winSigningConfig = {
+    certificateFile: process.env.WINDOWS_SIGNING,
+    certificatePassword: process.env.WINDOWS_SIGNING_PASSWORD
+  }
+}
+
 const config: ForgeConfig = {
   packagerConfig: {
     asar: true,
@@ -27,15 +51,14 @@ const config: ForgeConfig = {
     protocols: [
       { name: 'etcher', schemes: ['etcher']},
     ],
-
-    // osxSign: {},
-    // osxNotarize: {},
+    ...osxSigningConfig,
   },
   rebuildConfig: {},
   makers: [
     new MakerZIP(),
     new MakerSquirrel({
       setupIcon: 'assets/icon.ico',
+      ...winSigningConfig,
     }),
     new MakerDMG({
       background: './assets/dmg/background.tiff',