Completely disable MacOS code signing (for now)

Author: joeyballentine

.github/workflows/make.yml

@@ -39,34 +39,34 @@ jobs:
               if: ${{ matrix.os == 'ubuntu-latest' }}
               run: |
                   sudo apt update && sudo apt install flatpak flatpak-builder elfutils
-            - name: macOS certificate
-              if: matrix.os == 'macos-13'
-              env:
-                  APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
-                  APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
-              run: |
-                  KEY_CHAIN=build.keychain
-                  CERTIFICATE_P12=certificate.p12
-                  echo $APPLE_CERTIFICATE | base64 --decode > $CERTIFICATE_P12
-                  security create-keychain -p actions $KEY_CHAIN
-                  security default-keychain -s $KEY_CHAIN
-                  security unlock-keychain -p actions $KEY_CHAIN
-                  security import $CERTIFICATE_P12 -k $KEY_CHAIN -P $APPLE_CERTIFICATE_PASSWORD -T /usr/bin/codesign;
-                  security set-key-partition-list -S apple-tool:,apple: -s -k actions $KEY_CHAIN
-                  rm -fr *.p12
+            # - name: macOS certificate
+            #   if: matrix.os == 'macos-13'
+            #   env:
+            #       APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
+            #       APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
+            #   run: |
+            #       KEY_CHAIN=build.keychain
+            #       CERTIFICATE_P12=certificate.p12
+            #       echo $APPLE_CERTIFICATE | base64 --decode > $CERTIFICATE_P12
+            #       security create-keychain -p actions $KEY_CHAIN
+            #       security default-keychain -s $KEY_CHAIN
+            #       security unlock-keychain -p actions $KEY_CHAIN
+            #       security import $CERTIFICATE_P12 -k $KEY_CHAIN -P $APPLE_CERTIFICATE_PASSWORD -T /usr/bin/codesign;
+            #       security set-key-partition-list -S apple-tool:,apple: -s -k actions $KEY_CHAIN
+            #       rm -fr *.p12
             - name: Build release
-              env:
-                  APPLE_ID: ${{ secrets.APPLE_ID }}
-                  APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }}
-                  APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
-                  APPLE_SIGNING_ID: ${{ secrets.APPLE_SIGNING_ID }}
+            #   env:
+            #       APPLE_ID: ${{ secrets.APPLE_ID }}
+            #       APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }}
+            #       APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
+            #       APPLE_SIGNING_ID: ${{ secrets.APPLE_SIGNING_ID }}
               shell: bash
               run: |
                   npm ci
                   if [[ "${{ matrix.os }}" != "macos-13" ]]; then
-                      npm run make
+                      npm run make -- --no-sign
                   else
-                      npm run make -- --arch=universal
+                      npm run make -- --arch=universal --no-sign
                   fi
             - uses: actions/upload-artifact@v3
               with:

.github/workflows/release.yml

@@ -45,32 +45,32 @@ jobs:
               if: matrix.os == 'macos-13'
               run: python3 -m pip install setuptools
             - run: npm ci
-            - name: macOS certificate
-              if: matrix.os == 'macos-13'
-              env:
-                  APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
-                  APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
-              run: |
-                  KEY_CHAIN=build.keychain
-                  CERTIFICATE_P12=certificate.p12
-                  echo $APPLE_CERTIFICATE | base64 --decode > $CERTIFICATE_P12
-                  security create-keychain -p actions $KEY_CHAIN
-                  security default-keychain -s $KEY_CHAIN
-                  security unlock-keychain -p actions $KEY_CHAIN
-                  security import $CERTIFICATE_P12 -k $KEY_CHAIN -P $APPLE_CERTIFICATE_PASSWORD -T /usr/bin/codesign;
-                  security set-key-partition-list -S apple-tool:,apple: -s -k actions $KEY_CHAIN
-                  rm -fr *.p12
+            # - name: macOS certificate
+            #   if: matrix.os == 'macos-13'
+            #   env:
+            #       APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
+            #       APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
+            #   run: |
+            #       KEY_CHAIN=build.keychain
+            #       CERTIFICATE_P12=certificate.p12
+            #       echo $APPLE_CERTIFICATE | base64 --decode > $CERTIFICATE_P12
+            #       security create-keychain -p actions $KEY_CHAIN
+            #       security default-keychain -s $KEY_CHAIN
+            #       security unlock-keychain -p actions $KEY_CHAIN
+            #       security import $CERTIFICATE_P12 -k $KEY_CHAIN -P $APPLE_CERTIFICATE_PASSWORD -T /usr/bin/codesign;
+            #       security set-key-partition-list -S apple-tool:,apple: -s -k actions $KEY_CHAIN
+            #       rm -fr *.p12
             - name: publish
               env:
                   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-                  APPLE_ID: ${{ secrets.APPLE_ID }}
-                  APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }}
-                  APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
-                  APPLE_SIGNING_ID: ${{ secrets.APPLE_SIGNING_ID }}
+                #   APPLE_ID: ${{ secrets.APPLE_ID }}
+                #   APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }}
+                #   APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
+                #   APPLE_SIGNING_ID: ${{ secrets.APPLE_SIGNING_ID }}
               shell: bash
               run: |
                   if [[ "${{ matrix.os }}" != "macos-13" ]]; then
-                      npm run publish
+                      npm run publish -- --no-sign
                   else
-                      npm run publish -- --arch=universal
+                      npm run publish -- --arch=universal --no-sign
                   fi