github.com/cloudfoundry-attic/cli-with-i18n@v6.32.1-0.20171002233121-7401370d3b85+incompatible/ci/cli-release/tasks/sign-osx-installer.yml (about)

     1  ---
     2  platform: darwin
     3  
     4  params:
     5    CERT_COMMON_NAME:
     6    CERT_LOCATION:
     7    CERT_PASSWORD_LOCATION:
     8  
     9  inputs:
    10  - name: certificates
    11  - name: cli
    12  - name: edge-osx-installer-64
    13  
    14  outputs:
    15  - name: signed-osx-installer
    16  
    17  run:
    18    path: bash
    19    args:
    20    - -c
    21    - |
    22      set -ex
    23  
    24      VERSION=$(cat cli/ci/VERSION)
    25      CERT_PASSWORD=$(cat certificates/$CERT_PASSWORD_LOCATION)
    26  
    27      security create-keychain -p "" temp-keychain
    28  
    29      trap "security delete-keychain temp-keychain" 0
    30  
    31      security import certificates/$CERT_LOCATION -k temp-keychain -T "$(which productsign)" -P "$CERT_PASSWORD"
    32  
    33      productsign --timestamp \
    34        --sign "$CERT_COMMON_NAME" \
    35        --keychain temp-keychain \
    36        edge-osx-installer-64/cf-cli-installer_edge_osx.pkg \
    37        signed-osx-installer/cf-cli-installer_${VERSION}_osx.pkg