coder / coder/coder-desktop-macos

Use an AppleConnect API key to notarize

Aperta
#230 0 commenti 2 reazioni 0 assegnatari Vedi su GitHub
Lingua principale
Swift
Stelle
29
Fork
8
Merge medio
18h 14m
PR unite (30g)
4

Descrizione

Right now we use an Apple ID and app-specific password to notarize our application with Apple. This unnecessarily ties our builds to the permissions of an individual developer. If their permissions are reduced it could break notarization; if their permissions are increased it means our credentials are more powerful than they need to be.

`notarytool` can be configured to use an API key on the command line: https://keith.github.io/xcode-man-pages/notarytool.1.html#App

We also need an admin of our Apple Account to generate the key and add it to the GitHub Actions secrets.

Guida per i contributori

Apri la guida per i contributori

Direzione di ricerca

Locate the GitHub Actions workflow that invokes Apple’s notarytool, then read the notarytool App authentication documentation linked in the issue. Update the notarization configuration to use an AppleConnect API key from GitHub Actions secrets, and verify that the workflow completes successfully after an Apple Account admin creates and adds the key.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Valutazione

Stack tecnologico
github-actions, macos, swift
Ambito
ci-cd, release, security
Tipo di issue
Funzionalità
Difficoltà
3/5
Tempo stimato
1-2 giorni
Stato di attività
Ferma
Chiarezza
Abbastanza chiara
Idoneità per principianti
45/100

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.