From b0a844e262ff335c1f0e672ce06d7ef3c4f23d92 Mon Sep 17 00:00:00 2001
From: shuplenkov <konstantin.shuplenkov@dash.org>
Date: Thu, 6 Apr 2023 14:16:23 +0300
Subject: [PATCH] ci: sign MacOs Dashmate release

---
 .github/workflows/release.yml  | 25 +++++++++++++++++++++++++
 packages/dashmate/package.json |  3 ++-
 2 files changed, 27 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 70bce1577d1..95ccab5509a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -800,6 +800,29 @@ jobs:
           colima start
           echo "/usr/local/opt/llvm/bin" >> $GITHUB_PATH
 
+      - name: Install the Apple certificate
+        if: runner.os == 'macOS'
+        env:
+          BUILD_CERTIFICATE_BASE64: ${{ secrets.MACOS_BUILD_CERTIFICATE_BASE64 }}
+          P12_PASSWORD: ${{ secrets.MACOS_P12_PASSWORD }}
+          KEYCHAIN_PASSWORD: ${{ secrets.MACOS_KEYCHAIN_PASSWORD }}
+        run: |
+          # create variables
+          CERTIFICATE_PATH=$RUNNER_TEMP/build_certificate.p12
+          KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain-db
+
+          # import certificate and provisioning profile from secrets
+          echo -n "$BUILD_CERTIFICATE_BASE64" | base64 --decode -o $CERTIFICATE_PATH
+
+           # create temporary keychain
+          security create-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
+          security set-keychain-settings -lut 21600 $KEYCHAIN_PATH
+          security unlock-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
+
+          # import certificate to keychain
+          security import $CERTIFICATE_PATH -P "$P12_PASSWORD" -A -t cert -f pkcs12 -k $KEYCHAIN_PATH
+          security list-keychain -d user -s $KEYCHAIN_PATH
+
       - name: Install Linux build deps
         if: runner.os == 'Linux'
         run: sudo apt-get install -y nsis
@@ -832,6 +855,8 @@ jobs:
           CARGO_BUILD_PROFILE: release
 
       - name: Create package
+        env:
+          OSX_KEYCHAIN: $RUNNER_TEMP/app-signing.keychain-db
         run: "${GITHUB_WORKSPACE}/scripts/pack_dashmate.sh ${{ matrix.package_type }}"
 
       - name: Upload artifacts to action summary
diff --git a/packages/dashmate/package.json b/packages/dashmate/package.json
index 29234537e1c..ae9faa2e061 100644
--- a/packages/dashmate/package.json
+++ b/packages/dashmate/package.json
@@ -120,7 +120,8 @@
     "commands": "./src/commands",
     "bin": "dashmate",
     "macos": {
-      "identifier": "org.dash.dashmate"
+      "identifier": "org.dash.dashmate",
+      "sign": "'Developer ID Installer: The Dash Foundation, Inc.'"
     },
     "deb": {
       "dependencies": "docker-ce (>= 20.10.0) | docker.io (>= 20.10.0)"