/
githubmirror
/
node
Обзор
Документация
Войти
/
githubmirror
/
node
Код
Запросы
0
Пакеты
0
Релизы
0
Аналитика
Безопасность
main
tools/osx-notarize.sh
59 строк
1 KB
Ulises Gascón
tools: add macOS notarization verification step
23 ноя 2023, 21:51
23 ноя 2023, 21:51
83df02c
Код
Авторство
О чём код?
#!/bin/sh # Notarize a generated node-<version>.pkg file as an Apple requirement for installation on macOS Catalina and later, as validated by Gatekeeper. # Uses notarytool and requires Xcode >= 13.0. pkgid="$1" if [ -z "$pkgid" ]; then echo "Usage: $0 <pkgid>" exit 1 fi # shellcheck disable=SC2154 if [ -z "$NOTARIZATION_ID" ]; then echo "No NOTARIZATION_ID environment variable. Skipping notarization." exit 0 fi if [ -z "$NOTARIZATION_PASSWORD" ]; then echo "No NOTARIZATION_PASSWORD environment variable. Skipping notarization." exit 0 fi if [ -z "$NOTARIZATION_TEAM_ID" ]; then echo "No NOTARIZATION_TEAM_ID environment variable. Skipping notarization." exit 0 fi echo "Notarization process is done with Notarytool." if ! command -v xcrun notarytool > /dev/null then echo "Notarytool is not present in the system. Notarization has failed." exit 1 fi echo "Submitting node-$pkgid.pkg for notarization..." xcrun notarytool submit \ --keychain-profile "NODE_RELEASE_PROFILE" \ --wait \ "node-$pkgid.pkg" if [ $? -eq 0 ]; then echo "Notarization node-$pkgid.pkg submitted successfully." else echo "Notarization node-$pkgid.pkg failed." exit 1 fi if ! xcrun spctl --assess --type install --context context:primary-signature --ignore-cache --verbose=2 "node-$pkgid.pkg"; then echo "error: Signature will not be accepted by Gatekeeper!" 1>&2 exit 1 else echo "Verification was successful." fi xcrun stapler staple "node-$pkgid.pkg" echo "Stapler was successful."