Merge pull request #266 from b123400/codesign-certifaction

.github/workflows/build.yml

@@ -40,6 +40,13 @@ jobs:
           unzip amiko_frequency_fr.db.zip
           unzip drug_interactions_csv_fr.zip
           rm amiko_db_full_idx_de.zip amiko_frequency_de.db.zip drug_interactions_csv_de.zip amiko_db_full_idx_fr.zip amiko_frequency_fr.db.zip drug_interactions_csv_fr.zip
+      - name: Sign
+        run: |
+          cd HINClient/
+          IDENTITY="amikoosx.certifaction"
+          echo "Signing certifaction"
+          codesign -s - -i "$IDENTITY" --entitlements Certifaction.entitlements -f ./certifaction-arm64
+          codesign -s - -i "$IDENTITY" --entitlements Certifaction.entitlements -f ./certifaction-x86
       - name: Build
         run: |
           xcodebuild clean build -allowProvisioningUpdates -project AmiKo.xcodeproj -scheme AmiKo CODE_SIGN_IDENTITY="" CODE_SIGNING_REQUIRED=NO

HINClient/Certifaction.entitlements

@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>com.apple.security.inherit</key>
+	<true/>
+	<key>com.apple.security.app-sandbox</key>
+	<true/>
+	<key>com.apple.security.network.client</key>
+	<true/>
+	<key>com.apple.application-identifier</key>
+	<string>4B37356EGR.amikoosx</string>
+	<key>com.apple.developer.team-identifier</key>
+	<string>4B37356EGR</string>
+</dict>
+</plist>

scripts/build.sh

@@ -4,6 +4,7 @@
 
 STEP_REMOVE_SUPPORT_FILES=true
 STEP_DOWNLOAD_SUPPORT_FILES=true
+STEP_CODESIGN_CERTIFACTION=true
 STEP_BUILD=true
 STEP_ARCHIVE=true
 STEP_CREATE_PKG=true
@@ -70,6 +71,15 @@ done
 popd > /dev/null
 fi
 
+if [ $STEP_CODESIGN_CERTIFACTION ] ; then
+pushd ../HINClient
+    IDENTITY="amikoosx.certifaction"
+    echo "Signing certifaction"
+    codesign -s - -i "$IDENTITY" --entitlements Certifaction.entitlements -f ./certifaction-arm64
+    codesign -s - -i "$IDENTITY" --entitlements Certifaction.entitlements -f ./certifaction-x86
+popd
+fi
+
 #-------------------------------------------------------------------------------
 if [ $STEP_BUILD ] ; then
 pushd ../