From a0f7e2e65d28608d19d6cf3a03466aa198e07f2a Mon Sep 17 00:00:00 2001 From: Craig Raw Date: Mon, 10 Nov 2025 12:50:22 +0200 Subject: [PATCH] use sparrowwallet action for macos codesigning --- .github/workflows/package.yaml | 22 ++++++++++++++++------ 1 file changed, 16 insertions(+), 6 deletions(-) diff --git a/.github/workflows/package.yaml b/.github/workflows/package.yaml index d18d5554..3472fa3d 100644 --- a/.github/workflows/package.yaml +++ b/.github/workflows/package.yaml @@ -24,13 +24,22 @@ jobs: run: ./gradlew -v - name: Build with Gradle run: ./gradlew jpackage - - name: Package zip distribution - if: ${{ runner.os == 'Windows' || runner.os == 'macOS' }} + - name: Codesign, package and notarize macOS distribution + if: ${{ runner.os == 'macOS' }} + uses: sparrowwallet/github-actions/codesign-macos@v1 + with: + certificate: ${{ secrets.MACOS_CERTIFICATE }} + certificate-password: ${{ secrets.MACOS_CERTIFICATE_PASSWORD }} + apple-id: ${{ secrets.MACOS_NOTARIZATION_APPLE_ID }} + team-id: ${{ secrets.MACOS_NOTARIZATION_TEAM_ID }} + notarization-password: ${{ secrets.MACOS_NOTARIZATION_PASSWORD }} + - name: Package Windows zip distribution + if: ${{ runner.os == 'Windows' }} run: ./gradlew packageZipDistribution - - name: Package tar distribution + - name: Package Linux tar distribution if: ${{ runner.os == 'Linux' }} run: ./gradlew packageTarDistribution - - name: Repackage deb distribution + - name: Repackage Linux deb distribution if: ${{ runner.os == 'Linux' }} run: ./repackage.sh - name: Upload Artifact @@ -40,13 +49,14 @@ jobs: path: | build/jpackage/* !build/jpackage/Sparrow/ + !build/jpackage/Sparrow.app/ - name: Headless build with Gradle if: ${{ runner.os == 'Linux' }} run: ./gradlew -Djava.awt.headless=true clean jpackage - - name: Package headless tar distribution + - name: Package Linux headless tar distribution if: ${{ runner.os == 'Linux' }} run: ./gradlew -Djava.awt.headless=true packageTarDistribution - - name: Repackage headless deb distribution + - name: Repackage Linux headless deb distribution if: ${{ runner.os == 'Linux' }} run: ./repackage.sh - name: Upload Headless Artifact