From 00409fd9a8ffc4be0be4b6191acaa04ec9d46fd2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E5=B0=8F=E9=B1=BC=E5=BC=80=E5=8F=91?= <git@xiaoyu.com>
Date: Tue, 19 May 2026 12:41:48 +0800
Subject: [PATCH] =?UTF-8?q?ci:=20=E4=BF=AE=E5=A4=8D=20DMG=20=E9=87=8D?=
 =?UTF-8?q?=E6=96=B0=E7=AD=BE=E5=90=8D=EF=BC=8C=E7=94=A8=20python3=20?=
 =?UTF-8?q?=E5=86=99=E5=85=A5=E7=A7=81=E9=92=A5=E6=96=87=E4=BB=B6=E9=81=BF?=
 =?UTF-8?q?=E5=85=8D=20heredoc=20=E7=BC=A9=E8=BF=9B=E9=97=AE=E9=A2=98?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/release.yml | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ac4157c..07ce386 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -101,13 +101,12 @@ jobs:
         run: |
           DMG_PATH=$(ls src-tauri/target/universal-apple-darwin/release/bundle/dmg/*.dmg | head -1)
           rm -f "${DMG_PATH}.sig"
-          # 将私钥写入临时文件（heredoc 保留原始格式）
-          cat > /tmp/private.key << 'PRIVATEKEYEOF'
-          ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
-          PRIVATEKEYEOF
+          # 用 python 将私钥写入文件，避免 shell heredoc 缩进问题
+          python3 -c "import os; open('/tmp/private.key','w').write(os.environ['TAURI_SIGNING_PRIVATE_KEY'])"
           npx tauri signer sign -f /tmp/private.key -p "$TAURI_SIGNING_PRIVATE_KEY_PASSWORD" "$DMG_PATH"
           rm -f /tmp/private.key
         env:
+          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
           TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
 
       - name: Upload artifacts