ci: 修复 DMG 重新签名，使用 heredoc 将私钥写入临时文件

2026-05-19 12:23:20 +08:00
parent e6bbf0308a
commit 0292a7e1de
1 changed files with 6 additions and 2 deletions
@@ -101,9 +101,13 @@ jobs:
        run: |
          DMG_PATH=$(ls src-tauri/target/universal-apple-darwin/release/bundle/dmg/*.dmg | head -1)
          rm -f "${DMG_PATH}.sig"
-          npx tauri signer sign "$DMG_PATH"
+          # 将私钥写入临时文件（heredoc 保留原始格式）
+          cat > /tmp/private.key << 'PRIVATEKEYEOF'
+          ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
+          PRIVATEKEYEOF
+          npx tauri signer sign -f /tmp/private.key -p "$TAURI_SIGNING_PRIVATE_KEY_PASSWORD" "$DMG_PATH"
+          rm -f /tmp/private.key
        env:
-          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}

      - name: Upload artifacts