forked from snxraven/peardock
Gatekeeper reported the Bare server binary as damaged because it only had a linker ad-hoc stamp after embed. Seal darwin server binaries with the same sign-macos path used for Electron apps (codesign / rcodesign).
19 lines
717 B
Markdown
19 lines
717 B
Markdown
# Vendored `rcodesign` (apple-codesign)
|
|
|
|
Used by CI on Linux to **seal-sign** macOS artifacts produced on Linux:
|
|
|
|
- Electron `.app` bundles (forge `postPackage` → `scripts/sign-macos-app.cjs`)
|
|
- Bare `peardock-server` binaries (`scripts/bare-standalone.cjs` for every `darwin-*` host)
|
|
|
|
so Gatekeeper does not report them as “damaged / move to Trash”.
|
|
|
|
| Path | Binary |
|
|
|------|--------|
|
|
| `linux-x64/rcodesign` | x86_64 musl (ubuntu-latest runners) |
|
|
| `linux-arm64/rcodesign` | aarch64 musl |
|
|
|
|
Upstream: [indygreg/apple-platform-rs](https://github.com/indygreg/apple-platform-rs)
|
|
Release tag: `apple-codesign/0.29.0`
|
|
|
|
Do **not** re-download in CI — the rolling release workflow installs from these paths.
|