ci: 改用 TAURI_SIGNING_PRIVATE_KEY_PATH 环境变量传私钥文件路径，避免 clap 参数冲突

2026-05-19 13:56:41 +08:00
parent f36e8d3742
commit 53476d3e4a
1 changed files with 6 additions and 4 deletions
@@ -102,12 +102,14 @@ jobs:
          DMG_PATH=$(ls src-tauri/target/universal-apple-darwin/release/bundle/dmg/*.dmg | head -1)
          rm -f "${DMG_PATH}.sig"
          # 将私钥写入临时文件（strip 去掉首尾空白）
-          python3 -c "import os; open('/tmp/private.key','w').write(os.environ['TAURI_SIGNING_PRIVATE_KEY'].strip())"
-          # 用 env -u 清除 TAURI_SIGNING_PRIVATE_KEY 环境变量，避免与 -f 参数冲突
-          env -u TAURI_SIGNING_PRIVATE_KEY npx tauri signer sign -f /tmp/private.key -p "$TAURI_SIGNING_PRIVATE_KEY_PASSWORD" "$DMG_PATH"
+          # 注意：这里用 PK 作为临时 env 名，避免 TAURI_SIGNING_PRIVATE_KEY 被 clap 自动读取
+          python3 -c "import os; open('/tmp/private.key','w').write(os.environ['PK'].strip())"
+          # 通过 TAURI_SIGNING_PRIVATE_KEY_PATH 环境变量指定私钥文件，避免与 --private-key 冲突
+          npx tauri signer sign -p "$TAURI_SIGNING_PRIVATE_KEY_PASSWORD" "$DMG_PATH"
          rm -f /tmp/private.key
        env:
-          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
+          PK: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
+          TAURI_SIGNING_PRIVATE_KEY_PATH: /tmp/private.key
          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}

      - name: Upload artifacts