Skip to content

Commit 71de9ab

Browse files
committed
fixup! macOS release: sign payload
1 parent b306d1f commit 71de9ab

File tree

1 file changed

+8
-3
lines changed

1 file changed

+8
-3
lines changed

.github/workflows/release.yml

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -74,6 +74,9 @@ jobs:
7474
name: Sign macOS payload
7575
# ESRP service requires signing to run on Windows
7676
runs-on: windows-latest
77+
strategy:
78+
matrix:
79+
runtime: [ osx-x64, osx-arm64 ]
7780
needs: osx-build
7881
steps:
7982
- name: Check out repository
@@ -82,7 +85,7 @@ jobs:
8285
- name: Download payload
8386
uses: actions/download-artifact@v3
8487
with:
85-
name: tmp.osx-build
88+
name: tmp.${{ matrix.runtime }}-build
8689

8790
- name: Zip unsigned payload
8891
shell: pwsh
@@ -116,7 +119,9 @@ jobs:
116119
APPLE_KEY_CODE: ${{ secrets.APPLE_KEY_CODE }}
117120
APPLE_SIGNING_OP_CODE: ${{ secrets.APPLE_SIGNING_OPERATION_CODE }}
118121
run: |
119-
python .github\run_esrp_signing.py payload $env:APPLE_KEY_CODE $env:APPLE_SIGNING_OP_CODE --params 'Hardening' '--options=runtime'
122+
python .github\run_esrp_signing.py payload `
123+
$env:APPLE_KEY_CODE $env:APPLE_SIGNING_OP_CODE `
124+
--params 'Hardening' '--options=runtime'
120125
121126
- name: Unzip signed payload
122127
shell: pwsh
@@ -127,7 +132,7 @@ jobs:
127132
- name: Upload signed payload
128133
uses: actions/upload-artifact@v3
129134
with:
130-
name: osx-payload-sign
135+
name: ${{ matrix.runtime }}-payload-sign
131136
path: |
132137
signed
133138

0 commit comments

Comments
 (0)