Live video on the AT Protocol
1#!/bin/bash
2
3set -euo pipefail
4
5CERTIFICATE_FILE="certificate.p12"
6if [[ "${DEVELOPER_CERTIFICATE_BASE64:-}" == "" ]]; then
7 echo "DEVELOPER_CERTIFICATE_BASE64 is not set, skipping codesign"
8 exit 0
9fi
10echo "${DEVELOPER_CERTIFICATE_BASE64}" | base64 -d >"$CERTIFICATE_FILE"
11rcodesign sign \
12 --p12-file "$CERTIFICATE_FILE" \
13 --p12-password "${DEVELOPER_CERTIFICATE_PASSWORD}" \
14 --code-signature-flags runtime \
15 "$1"
16rm -f "$CERTIFICATE_FILE"
17
18if [[ "$APPLE_CODESIGN_API_KEY:-" != "" ]]; then
19 zip "$1.zip" "$1"
20 rcodesign notary-submit --api-key-file "$APPLE_CODESIGN_API_KEY" "$1.zip"
21fi