ci: 修复 DMG 重新签名，用 python3 写入私钥文件避免 heredoc 缩进问题

2026-05-19 12:41:48 +08:00
parent 0292a7e1de
commit 00409fd9a8
1 changed files with 3 additions and 4 deletions
@@ -101,13 +101,12 @@ jobs:
        run: |
          DMG_PATH=$(ls src-tauri/target/universal-apple-darwin/release/bundle/dmg/*.dmg | head -1)
          rm -f "${DMG_PATH}.sig"
-          # 将私钥写入临时文件（heredoc 保留原始格式）
-          cat > /tmp/private.key << 'PRIVATEKEYEOF'
-          ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
-          PRIVATEKEYEOF
+          # 用 python 将私钥写入文件，避免 shell heredoc 缩进问题
+          python3 -c "import os; open('/tmp/private.key','w').write(os.environ['TAURI_SIGNING_PRIVATE_KEY'])"
          npx tauri signer sign -f /tmp/private.key -p "$TAURI_SIGNING_PRIVATE_KEY_PASSWORD" "$DMG_PATH"
          rm -f /tmp/private.key
        env:
+          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}

      - name: Upload artifacts