macOS Code Signing & Local build scripts & Improved Issue template

[0PandaDEV]

I implemented macOS Code Signing as well as 3 build scripts to build Scope locally on the respective devices.

For the Code Singing to work, there needs to be a few environment variables in this repo:

• APPLE_CERTIFICATE: Base64 encoded .p12 certificate file
• APPLE_CERTIFICATE_PASSWORD: Password for the certificate
• APPLE_ID: Apple Developer ID Email
• APPLE_ID_PASSWORD: App-specific password for your Apple ID
• KEYCHAIN_PASSWORD: Any secure password for the temporary keychain

[circularsprojects]

if i remember correctly you can submit apps to the notary service without having to use apple id email/password, i'm gonna have a bit of a look at it

[circularsprojects]

if i remember correctly you can submit apps to the notary service without having to use apple id email/password, i'm gonna have a bit of a look at it

i was right, you can make a signing profile with an app store connect api key, and then use that to notarize apps

you can then just use xcrun notarytool submit [path] --keychain-profile [profile]

not entirely sure how to do this via github actions though

[0PandaDEV]

Ok, but this requires a Paid Developer account, which I don't have, so I can't test this.

[circularsprojects]

Ok, but this requires a Paid Developer account, which I don't have, so I can't test this.

i can test it out in my fork

also doesn't using the notary service at all require a paid dev account?

[0PandaDEV]

No you can sign with a free account it will just pop up as unverified but at least it's no longer damaged.

[circularsprojects]

No you can sign with a free account it will just pop up as unverified but at least it's no longer damaged.

ohhh right

[alii]

Needs APP_BUNDLE_ID to be loaded in actual workflow file. Can hardcode it in the yml file under env: i think

[0PandaDEV]

so what should the that be?

com.scopeclient.scope ?

[alii]

com.scopeclient.desktop imo