nick-f / macos-binary-signer Goto Github PK

Problem

Packages is a great app, but is an extra dependency. It was originally used to simplify setting up a working proof of concept, but it is only used by the script.

Ideal outcome

All references to Packages are removed and only command line tools that are built into macOS are used for packaging and signing.

Problem

Permissions are a combination of the bundle identifier (i.e. dev.nickf.my-great-app) and the Apple Developer account that the signing certificate came from. macOS will prompt for permissions again if either of these change.

Right now the identifier needs to be typed in every time.

Ideal state

The bundle identifier will be able to be set either as a variable, in a config file that is not tracked by git, or both.

Variable

IDENTIFIER=dev.nickf.my-great-app ./run.bash

Config file

$ pwd
<path to repo>/buildkite-agent

$ cat mbs.conf
IDENTIFIER=dev.nickf.my-great-app

$ cat .gitignore
mbs.conf

$ ./run.bash
# <gets IDENTIFIER from mbs.conf or whatever it's called>