Merge pull request #43 from noahlz/release/signing

Add code signing for macOS releases. Windows signing still todo.

Author: noahlz

.github/workflows/_build-artifacts.yml

@@ -35,7 +35,10 @@ jobs:
       - run: npm run rebuild:electron
       - run: npx electron-builder --mac --universal --publish never
         env:
-          CSC_IDENTITY_AUTO_DISCOVERY: false
+          CSC_LINK: ${{ secrets.CSC_LINK }}
+          CSC_KEY_PASSWORD: ${{ secrets.CSC_KEY_PASSWORD }}
+          APPLE_ID: ${{ secrets.APPLE_ID }}
+          APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }}
       - name: Get version
         id: version
         run: echo "version=$(node -p "require('./package.json').version")" >> $GITHUB_OUTPUT
@@ -49,6 +52,7 @@ jobs:
           retention-days: 1
 
   build-win:
+    # TODO: Code Signing
     name: Build (Windows)
     needs: test
     runs-on: windows-latest

electron-builder.json

@@ -20,7 +20,10 @@
   "mac": {
     "target": ["dmg"],
     "category": "public.app-category.games",
-    "icon": "resources/icons/mac/icon.icns"
+    "icon": "resources/icons/mac/icon.icns",
+    "notarize": {
+      "teamId": "2R45ZG5BZL"
+    }
   },
   "win": {
     "target": ["nsis"],