go/goreleaser
go/goreleaser
1
0
Fork 0
mirror of https://github.com/goreleaser/goreleaser.git synced 2024-12-31 01:53:50 +02:00
Code Issues Releases Activity

feat(notary): allow to sign without notarizing (#4919)

Browse Source 
closes #4890

- [x] docs
- [ ] tests
This commit is contained in:
Carlos Alexandro Becker 2024-06-11 09:20:48 -03:00 committed by GitHub
parent 1e076de708
commit 2d54bf0211
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
internal/pipe/notary/macos.go
View File

@ -100,6 +100,13 @@ func signAndNotarize(ctx *context.Context, cfg config.MacOSSignNotarize) error {
return fmt.Errorf("notarize: macos: %s: %w", bin.Path, err) return fmt.Errorf("notarize: macos: %s: %w", bin.Path, err)
} }
if cfg.Notarize.IssuerID == "" ||
cfg.Notarize.KeyID == "" ||
cfg.Notarize.Key == "" {
log.WithField("binary", bin.Path).Info("will not try to notarize")
continue
}
notarizeCfg := quill.NewNotarizeConfig( notarizeCfg := quill.NewNotarizeConfig(
cfg.Notarize.IssuerID, cfg.Notarize.IssuerID,
cfg.Notarize.KeyID, cfg.Notarize.KeyID,

7
www/docs/customization/notarize.md
View File

@ -88,5 +88,12 @@ notarize:
base64 -w0 < ./ApiKey_AAABBBCCC.p8 base64 -w0 < ./ApiKey_AAABBBCCC.p8
``` ```
## Signing only
> Since v2.1
If you want to only sign the binaries, but not notarize them, you can simply
leave the `notarize` section of your configuration empty.
[unibin]: ./universalbinaries.md [unibin]: ./universalbinaries.md
[quill]: https://github.com/anchore/quill [quill]: https://github.com/anchore/quill