mirror of
https://github.com/nolen777/eagle0.git
synced 2026-07-28 21:35:42 +00:00
* Remove --keychain flag from codesign commands The --keychain flag was causing codesign to look for the private key in the build keychain, but the matching cert+key is in login.keychain. Since we now use the unambiguous SHA-1 hash, codesign will find the correct certificate and key pair in whichever keychain contains them. This fixes the intermittent errSecInternalComponent failures. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> * Use build keychain specifically for CI codesigning In CI, the workflow imports the signing certificate into a temporary build keychain. Previously, the script searched ALL keychains and picked the first certificate found, which could be an old certificate from login.keychain instead of the freshly imported one. Now when KEYCHAIN_NAME is set (CI environment), the script looks for certificates only in that specific keychain. For local dev (no KEYCHAIN_NAME), it still searches all keychains. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>