Skip to content

Commit bdb0e07

Browse files
committed
build(portable): Skip Gatekeeper check for unsigned AXe archive
AXe's Homebrew artifact is intentionally unsigned, so Gatekeeper assessment\nreliably fails during CI bundling. Skip only that check for the unsigned\narchive flavor while keeping runtime execution validation in place.\n\nCo-Authored-By: Claude <noreply@anthropic.com>
1 parent d38b8e3 commit bdb0e07

1 file changed

Lines changed: 15 additions & 11 deletions

File tree

scripts/bundle-axe.sh

Lines changed: 15 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -194,19 +194,23 @@ if [ "$OS_NAME" = "Darwin" ]; then
194194
done < <(find "$BUNDLED_DIR/Frameworks" -name "*.framework" -type d)
195195
fi
196196

197-
echo "🛡️ Assessing AXe with Gatekeeper..."
198-
SPCTL_LOG="$(mktemp)"
199-
if ! spctl --assess --type execute "$BUNDLED_DIR/axe" 2>"$SPCTL_LOG"; then
200-
if grep -q "does not seem to be an app" "$SPCTL_LOG"; then
201-
echo "⚠️ Gatekeeper execute assessment is inconclusive for CLI binaries; continuing"
202-
else
203-
cat "$SPCTL_LOG"
204-
echo "❌ Gatekeeper assessment failed for bundled AXe binary"
205-
rm "$SPCTL_LOG"
206-
exit 1
197+
if [ "$AXE_ARCHIVE_FLAVOR" = "homebrew-unsigned" ]; then
198+
echo "ℹ️ Skipping Gatekeeper assessment for unsigned AXe Homebrew archive"
199+
else
200+
echo "🛡️ Assessing AXe with Gatekeeper..."
201+
SPCTL_LOG="$(mktemp)"
202+
if ! spctl --assess --type execute "$BUNDLED_DIR/axe" 2>"$SPCTL_LOG"; then
203+
if grep -q "does not seem to be an app" "$SPCTL_LOG"; then
204+
echo "⚠️ Gatekeeper execute assessment is inconclusive for CLI binaries; continuing"
205+
else
206+
cat "$SPCTL_LOG"
207+
echo "❌ Gatekeeper assessment failed for bundled AXe binary"
208+
rm "$SPCTL_LOG"
209+
exit 1
210+
fi
207211
fi
212+
rm "$SPCTL_LOG"
208213
fi
209-
rm "$SPCTL_LOG"
210214

211215
echo "🧪 Testing bundled AXe binary..."
212216
if DYLD_FRAMEWORK_PATH="$BUNDLED_DIR/Frameworks" "$BUNDLED_DIR/axe" --version > /dev/null 2>&1; then

0 commit comments

Comments
 (0)