Enable Hardened Runtime on macOS (#133)

lhvy · Jan 9, 2024 · a9cca64 · a9cca64
1 parent 595458c
commit a9cca64
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/.github/workflows/cd.yaml b/.github/workflows/cd.yaml
@@ -63,6 +63,7 @@ jobs:
       - name: Create macOS archive
         run: |
           lipo -create -output ./${{ env.RELEASE_BIN }}-mac-universal ./target/x86_64-apple-darwin/release/${{ env.RELEASE_BIN }} ./target/aarch64-apple-darwin/release/${{ env.RELEASE_BIN }}
+          codesign --sign - --options runtime ./${{ env.RELEASE_BIN }}-mac-universal
           tar -czvf ./${{ env.RELEASE_BIN }}-mac-universal.tar.gz ./${{ env.RELEASE_BIN }}-mac-universal
         if: matrix.os == 'macos-latest'