@@ -1060,6 +1060,27 @@ jobs:
1060
1060
-name :Setup Go
1061
1061
uses :./.github/actions/setup-go
1062
1062
1063
+ -name :Install rcodesign
1064
+ run :|
1065
+ set -euo pipefail
1066
+ wget -O /tmp/rcodesign.tar.gz https://github.com/indygreg/apple-platform-rs/releases/download/apple-codesign%2F0.22.0/apple-codesign-0.22.0-x86_64-unknown-linux-musl.tar.gz
1067
+ sudo tar -xzf /tmp/rcodesign.tar.gz \
1068
+ -C /usr/bin \
1069
+ --strip-components=1 \
1070
+ apple-codesign-0.22.0-x86_64-unknown-linux-musl/rcodesign
1071
+ rm /tmp/rcodesign.tar.gz
1072
+
1073
+ -name :Setup Apple Developer certificate
1074
+ run :|
1075
+ set -euo pipefail
1076
+ touch /tmp/{apple_cert.p12,apple_cert_password.txt}
1077
+ chmod 600 /tmp/{apple_cert.p12,apple_cert_password.txt}
1078
+ echo "$AC_CERTIFICATE_P12_BASE64" | base64 -d > /tmp/apple_cert.p12
1079
+ echo "$AC_CERTIFICATE_PASSWORD" > /tmp/apple_cert_password.txt
1080
+ env :
1081
+ AC_CERTIFICATE_P12_BASE64 :${{ secrets.AC_CERTIFICATE_P12_BASE64 }}
1082
+ AC_CERTIFICATE_PASSWORD :${{ secrets.AC_CERTIFICATE_PASSWORD }}
1083
+
1063
1084
# Necessary for signing Windows binaries.
1064
1085
-name :Setup Java
1065
1086
uses :actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
@@ -1138,6 +1159,9 @@ jobs:
1138
1159
CODER_WINDOWS_RESOURCES :" 1"
1139
1160
CODER_SIGN_GPG :" 1"
1140
1161
CODER_GPG_RELEASE_KEY_BASE64 :${{ secrets.GPG_RELEASE_KEY_BASE64 }}
1162
+ CODER_SIGN_DARWIN :" 1"
1163
+ AC_CERTIFICATE_FILE :/tmp/apple_cert.p12
1164
+ AC_CERTIFICATE_PASSWORD_FILE :/tmp/apple_cert_password.txt
1141
1165
EV_KEY :${{ secrets.EV_KEY }}
1142
1166
EV_KEYSTORE :${{ secrets.EV_KEYSTORE }}
1143
1167
EV_TSA_URL :${{ secrets.EV_TSA_URL }}