新增：MacOS 打包使用官方证书

Author: modstart

.github/workflows/main-build.yml

@@ -56,6 +56,7 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           APPLE_ID: ${{ secrets.APPLE_ID }}
           APPLE_ID_PASSWORD: ${{ secrets.APPLE_ID_PASSWORD }}
+          APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.APPLE_ID_PASSWORD }}
           APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
 
       - name: Set Build Name ( Linux / macOS )

.github/workflows/tag-release.yml

@@ -55,6 +55,7 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           APPLE_ID: ${{ secrets.APPLE_ID }}
           APPLE_ID_PASSWORD: ${{ secrets.APPLE_ID_PASSWORD }}
+          APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.APPLE_ID_PASSWORD }}
           APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
 
       - name: Release Assets

scripts/notarize.cjs

@@ -3,6 +3,7 @@ const {notarize} = require("@electron/notarize");
 exports.default = async function notarizing(context) {
     const appName = context.packager.appInfo.productFilename;
     const {electronPlatformName, appOutDir} = context;
+    console.log(`  • Notarization Start`);
     // We skip notarization if the process is not running on MacOS and
     // if the enviroment variable SKIP_NOTARIZE is set to `true`
     // This is useful for local testing where notarization is useless
@@ -20,14 +21,14 @@ exports.default = async function notarizing(context) {
 
     let appPath = `${appOutDir}/${appName}.app`;
     let {APPLE_ID, APPLE_ID_PASSWORD, APPLE_TEAM_ID} = process.env;
-    console.log(`  • Notarizing ${appPath}`);
-
-    return await notarize({
+    const notarizeOption = {
         tool: "notarytool",
         appBundleId: appId,
         appPath,
         appleId: APPLE_ID,
         appleIdPassword: APPLE_ID_PASSWORD,
         teamId: APPLE_TEAM_ID,
-    });
+    }
+    console.log(`  • Notarizing`, `appPath:${appPath} notarizeOption:${JSON.stringify(notarizeOption)}`);
+    return await notarize(notarizeOption);
 };