admin/airi
1
0
Fork 0
mirror of https://github.com/moeru-ai/airi.git synced 2026-08-14 00:48:06 +00:00
Code Issues Packages Projects Releases Wiki Activity

ci(stage-tamagotchi): use import-codesign-certs action for Steam library re-sign

Browse Source
This commit is contained in:
Lulu
2026-08-07 23:21:45 +08:00
parent 6a8d19f126
commit 0fe65b46b0
1 changed files with 9 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/release-tamagotchi-steam.yml
+9 -15
View File
@@ -162,27 +162,21 @@ jobs:
APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.APPLE_DEVELOPER_APPLE_APP_SPECIFIC_PASSWORD }}
APPLE_TEAM_ID: ${{ secrets.APPLE_DEVELOPER_TEAM_ID }}
- name: Import Apple signing certificate
if: matrix.depot == 'macos'
uses: apple-actions/import-codesign-certs@v7
with:
p12-file-base64: ${{ secrets.CSC_CONTENT }}
p12-password: ${{ secrets.CSC_KEY_PASSWORD }}
- name: Re-sign Steam API library for macOS
if: matrix.depot == 'macos'
env:
CSC_KEY_PASSWORD: ${{ secrets.CSC_KEY_PASSWORD }}
run: |
KEYCHAIN_PATH="$RUNNER_TEMP/steam-signing.keychain-db"
KEYCHAIN_PASSWORD="$(openssl rand -hex 16)"
security create-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
security set-keychain-settings -lut 3600 "$KEYCHAIN_PATH"
security unlock-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
security import apps/stage-tamagotchi/apple-developer-code-signing.p12 \
-k "$KEYCHAIN_PATH" -P "$CSC_KEY_PASSWORD" -T /usr/bin/codesign -T /usr/bin/security
security set-key-partition-list -S apple-tool:,apple: -s -k "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
security list-keychains -d user -s "$KEYCHAIN_PATH" login.keychain-db
# Valve signs the SDK library with its own team, so re-sign it with
# the app's Developer ID to pass hardened-runtime library validation.
identity="$(security find-identity -v -p codesigning "$KEYCHAIN_PATH" | awk -F'"' '/Developer ID Application/ {print $2; exit}')"
identity="$(security find-identity -v -p codesigning | awk -F'"' '/Developer ID Application/ {print $2; exit}')"
dylib_path="apps/stage-tamagotchi/dist/mac-arm64/steamworks_sdk/redistributable_bin/osx/libsteam_api.dylib"
codesign --force --sign "$identity" --keychain "$KEYCHAIN_PATH" "$dylib_path"
codesign --force --sign "$identity" "$dylib_path"
codesign --verify --verbose=2 "$dylib_path"
- name: Build Linux app