Loverde-Company-LTDA/LCEssentials
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 18 Wiki Activity

[macos-runner] Use a dedicated CI keychain instead of the login keychain

Browse Source 
A Gitea Actions job runs in a different macOS security session than an
interactive SSH login - login.keychain-db's unlock state and search-list
membership don't reliably carry over across that boundary, so the
identity was invisible to the job even after successful unlock. Point
the workflow's unlock step at a dedicated ci-signing.keychain-db instead,
created independent of any login session.
This commit is contained in:
Daniel Arantes Loverde
2026-07-30 18:40:51 -03:00
parent d84fcc6ac4
commit a0f18644d7
2 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
.gitea/workflows/beta.yml
View File

@@ -49,9 +49,9 @@ jobs:
- name: Unlock keychain - name: Unlock keychain
run: | run: |
security unlock-keychain -p "${{ secrets.MAC_KEYCHAIN_PASSWORD }}" ~/Library/Keychains/login.keychain-db security unlock-keychain -p "${{ secrets.CI_KEYCHAIN_PASSWORD }}" ~/Library/Keychains/ci-signing.keychain-db
security list-keychains -d user -s ~/Library/Keychains/login.keychain-db security list-keychains -d user -s ~/Library/Keychains/ci-signing.keychain-db ~/Library/Keychains/login.keychain-db
security default-keychain -d user -s ~/Library/Keychains/login.keychain-db security default-keychain -d user -s ~/Library/Keychains/ci-signing.keychain-db
security find-identity -v -p codesigning security find-identity -v -p codesigning
- name: fastlane beta - name: fastlane beta

6
.gitea/workflows/release.yml
View File

@@ -56,9 +56,9 @@ jobs:
- name: Unlock keychain - name: Unlock keychain
run: | run: |
security unlock-keychain -p "${{ secrets.MAC_KEYCHAIN_PASSWORD }}" ~/Library/Keychains/login.keychain-db security unlock-keychain -p "${{ secrets.CI_KEYCHAIN_PASSWORD }}" ~/Library/Keychains/ci-signing.keychain-db
security list-keychains -d user -s ~/Library/Keychains/login.keychain-db security list-keychains -d user -s ~/Library/Keychains/ci-signing.keychain-db ~/Library/Keychains/login.keychain-db
security default-keychain -d user -s ~/Library/Keychains/login.keychain-db security default-keychain -d user -s ~/Library/Keychains/ci-signing.keychain-db
security find-identity -v -p codesigning security find-identity -v -p codesigning
- name: fastlane release - name: fastlane release