From 41bf94fea46ebf84e7ae55cfca8010462ab967ed Mon Sep 17 00:00:00 2001 From: Carlos Alexandro Becker Date: Thu, 27 Jun 2024 13:13:20 -0300 Subject: [PATCH] ci: sign & notarize macos binaries signs and notarizes macos binaries when releasing --- .github/workflows/goreleaser.yml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/.github/workflows/goreleaser.yml b/.github/workflows/goreleaser.yml index 536c46a..97115bc 100644 --- a/.github/workflows/goreleaser.yml +++ b/.github/workflows/goreleaser.yml @@ -1,3 +1,5 @@ +# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json + name: goreleaser on: @@ -21,6 +23,11 @@ jobs: fury_token: ${{ secrets.FURY_TOKEN }} nfpm_gpg_key: ${{ secrets.NFPM_GPG_KEY }} nfpm_passphrase: ${{ secrets.NFPM_PASSPHRASE }} + macos_sign_p12: ${{ secrets.MACOS_SIGN_P12 }} + macos_sign_password: ${{ secrets.MACOS_SIGN_PASSWORD }} + macos_notary_issuer_id: ${{ secrets.MACOS_NOTARY_ISSUER_ID }} + macos_notary_key_id: ${{ secrets.MACOS_NOTARY_KEY_ID }} + macos_notary_key: ${{ secrets.MACOS_NOTARY_KEY }} homebrew: name: Bump Homebrew formula runs-on: ubuntu-latest