b4da757c599c4bedd345879bfdcd36026e365abc

Author
Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
Committer
GitHub <noreply@github.com>
Date

Message

ci: sign & notarize macos binaries (#537)

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>

Diff

 1diff --git a/.github/workflows/goreleaser.yml b/.github/workflows/goreleaser.yml
 2index 3ee85953118140703264aefc7ae4596e31515a10..171861cd23ba4ced024b5b292f77aa9d69cf84ca 100644
 3--- a/.github/workflows/goreleaser.yml
 4+++ b/.github/workflows/goreleaser.yml
 5@@ -1,3 +1,4 @@
 6+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
 7 name: goreleaser
 8 
 9 on:
10@@ -20,5 +21,8 @@ jobs:
11       fury_token: ${{ secrets.FURY_TOKEN }}
12       nfpm_gpg_key: ${{ secrets.NFPM_GPG_KEY }}
13       nfpm_passphrase: ${{ secrets.NFPM_PASSPHRASE }}
14-
15-# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
16+      macos_sign_p12: ${{ secrets.MACOS_SIGN_P12 }}
17+      macos_sign_password: ${{ secrets.MACOS_SIGN_PASSWORD }}
18+      macos_notary_issuer_id: ${{ secrets.MACOS_NOTARY_ISSUER_ID }}
19+      macos_notary_key_id: ${{ secrets.MACOS_NOTARY_KEY_ID }}
20+      macos_notary_key: ${{ secrets.MACOS_NOTARY_KEY }}
21diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
22index 28f61f76ae43d54d7fbbd04d2b21f466fa0fccfe..d86e6abd7369305f0228f886e5fb3335f70d4b7e 100644
23--- a/.github/workflows/nightly.yml
24+++ b/.github/workflows/nightly.yml
25@@ -12,3 +12,8 @@ jobs:
26       docker_username: ${{ secrets.DOCKERHUB_USERNAME }}
27       docker_token: ${{ secrets.DOCKERHUB_TOKEN }}
28       goreleaser_key: ${{ secrets.GORELEASER_KEY }}
29+      macos_sign_p12: ${{ secrets.MACOS_SIGN_P12 }}
30+      macos_sign_password: ${{ secrets.MACOS_SIGN_PASSWORD }}
31+      macos_notary_issuer_id: ${{ secrets.MACOS_NOTARY_ISSUER_ID }}
32+      macos_notary_key_id: ${{ secrets.MACOS_NOTARY_KEY_ID }}
33+      macos_notary_key: ${{ secrets.MACOS_NOTARY_KEY }}