feat: add notarization for apple

dpolakovics · Jan 19, 2025 · 1ac68bf · 1ac68bf
1 parent 6b0dec9
commit 1ac68bf
Show file tree

Hide file tree

Showing 3 changed files with 22 additions and 1 deletion.
diff --git a/.chatgpt_config.yaml b/.chatgpt_config.yaml
@@ -2,5 +2,12 @@ project_name: "soundscape-sync"
 default_prompt_blocks:
   - "basic-prompt"
   - "go-development"
+  - "secure-coding"
+  - "workflow-prompt"
 initial_files:
   - "README.md"
+
+preview_changes: false
+interactive_file_selection: false
+partial_acceptance: false
+enable_step_by_step: true
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -100,6 +100,20 @@ jobs:
       run: codesign --verify --deep --strict --verbose=2 SoundscapeSync.app
     - name: Zip macOS build
       run: zip -r SoundscapeSync.app.zip SoundscapeSync.app
+    - name: Notarize App
+      if: ${{ secrets.APPLE_ID && secrets.APPLE_TEAM_ID && secrets.APPLE_PASSWORD }}
+      env:
+        APPLE_ID: ${{ secrets.APPLE_ID }}
+        APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
+        APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }}
+      run: |
+        xcrun notarytool submit SoundscapeSync.app.zip --apple-id "$APPLE_ID" --team-id "$APPLE_TEAM_ID" --password "$APPLE_PASSWORD" --wait
+    - name: Staple Notarization
+      if: ${{ secrets.APPLE_ID && secrets.APPLE_TEAM_ID && secrets.APPLE_PASSWORD }}
+      run: xcrun stapler staple SoundscapeSync.app
+    - name: Re-zip macOS build
+      if: ${{ secrets.APPLE_ID && secrets.APPLE_TEAM_ID && secrets.APPLE_PASSWORD }}
+      run: zip -r SoundscapeSync.app.zip SoundscapeSync.app
     - name: Upload macOS artifact
       uses: actions/upload-artifact@v4
       with:

diff --git a/main.go b/main.go
@@ -21,7 +21,7 @@ import (
 const (
     owner      = "dpolakovics"
     repo       = "soundscape-sync"
-    currentTag = "v1.0.0"
+    currentTag = "v1.0.2"
 )
 
 func main() {