Merge pull request #68 from muxinc/dj/darwin-signing-fix

fix: codesign darwin binaries and smoke-test on CI

Author: dylanjha

.github/workflows/ci.yml

@@ -59,3 +59,13 @@ jobs:
       - run: pnpm install --frozen-lockfile
       - name: Build binary
         run: bun build --compile --minify --sourcemap ./src/index.ts --target=bun-${{ matrix.target }} --outfile ./dist/mux-${{ matrix.target }}
+      - name: Codesign darwin binary (ad-hoc)
+        if: startsWith(matrix.target, 'darwin-')
+        run: |
+          codesign --remove-signature ./dist/mux-${{ matrix.target }}
+          codesign --sign - ./dist/mux-${{ matrix.target }}
+      - name: Smoke test binary
+        run: ./dist/mux-${{ matrix.target }} --version
+      - name: Verify darwin binary is codesigned
+        if: startsWith(matrix.target, 'darwin-')
+        run: codesign -vvv --verify --strict ./dist/mux-${{ matrix.target }}

.github/workflows/release.yml

@@ -33,6 +33,16 @@ jobs:
         run: node -e "const fs=require('fs');const p=JSON.parse(fs.readFileSync('package.json','utf8'));p.version='${GITHUB_REF_NAME#v}';fs.writeFileSync('package.json',JSON.stringify(p,null,2)+'\n');"
       - name: Build binary
         run: bun build --compile --minify --sourcemap ./src/index.ts --target=bun-${{ matrix.target }} --outfile ./dist/mux-${{ matrix.target }}
+      - name: Codesign darwin binary (ad-hoc)
+        if: startsWith(matrix.target, 'darwin-')
+        run: |
+          codesign --remove-signature ./dist/mux-${{ matrix.target }}
+          codesign --sign - ./dist/mux-${{ matrix.target }}
+      - name: Smoke test binary
+        run: ./dist/mux-${{ matrix.target }} --version
+      - name: Verify darwin binary is codesigned
+        if: startsWith(matrix.target, 'darwin-')
+        run: codesign -vvv --verify --strict ./dist/mux-${{ matrix.target }}
       - uses: actions/upload-artifact@v4
         with:
           name: mux-${{ matrix.target }}