2026-05-21 17:34:49 -04:00
parent 82e0ef17e9
commit 9c892f47a3
2 changed files with 18 additions and 70 deletions
@@ -491,9 +491,15 @@ jobs:
          codesign -dv --verbose=2 "$APP_BUNDLE_PATH" >/dev/null 2>&1
          echo "Creating signed app zip and installer pkg..."
          rm -f "$SIGNED_ZIP_PATH" "$SIGNED_PKG_PATH"
          rm -f "$SIGNED_ZIP_PATH" "$SIGNED_PKG_PATH" component.pkg
          ditto -c -k --sequesterRsrc --keepParent "$APP_BUNDLE_PATH" "$SIGNED_ZIP_PATH"
          productbuild --component "$APP_BUNDLE_PATH" /Applications --sign "$INSTALLER_SIGN_ID" "$SIGNED_PKG_PATH"
          # Build an unsigned component pkg with relocation disabled, then wrap it
          # in a signed distribution pkg. This ensures the app always installs to
          # /Applications regardless of any existing bundle on the user's machine.
          pkgbuild --component "$APP_BUNDLE_PATH" --install-location /Applications --no-relocate component.pkg
          productbuild --package component.pkg --sign "$INSTALLER_SIGN_ID" "$SIGNED_PKG_PATH"
          rm -f component.pkg
          echo "Done. Signed artifacts:"
          echo "- $SIGNED_PKG_PATH"