chore: update macOS sidecar signing process and add entitlements

- Introduced a new entitlements file for the sidecar to enhance security during code signing.
- Updated the GitHub Actions workflow to utilize the entitlements file in the signing process.
- Bumped OpenHuman version to 0.49.21 in Cargo.lock for dependency management.
- Configured tauri.conf.json to reference the new entitlements file for macOS builds.
This commit is contained in:
Steven Enamakel
2026-03-30 15:29:15 -07:00
parent 7c0c381196
commit eacf7f1678
4 changed files with 18 additions and 2 deletions
+4 -1
View File
@@ -453,9 +453,12 @@ jobs:
SIDECAR_BASE: ${{ steps.core-paths.outputs.sidecar_base }}
run: |
SIDECAR_PATH="app/src-tauri/binaries/${SIDECAR_BASE}-${MATRIX_TARGET}"
ENTITLEMENTS="app/src-tauri/entitlements.sidecar.plist"
echo "Signing sidecar: $SIDECAR_PATH"
codesign --force --options runtime --sign "$APPLE_SIGNING_IDENTITY" "$SIDECAR_PATH"
echo "Using entitlements: $ENTITLEMENTS"
codesign --force --options runtime --entitlements "$ENTITLEMENTS" --sign "$APPLE_SIGNING_IDENTITY" "$SIDECAR_PATH"
codesign --verify --verbose "$SIDECAR_PATH"
codesign --display --entitlements - "$SIDECAR_PATH"
echo "Sidecar signed successfully"
- name: Resolve standalone core CLI artifact path