Swift 98.3%
Shell 1.7%
1#!/bin/bash2# Auteur : Simon-Pierre Boucher — contact@spboucher.ai3# Signature Developer ID, DMG et notarisation de KA pour macOS.4# Identité et flux repris du pipeline forge-studio / zyquo-term5# (Team 3YM54G49SN, profil notarytool keychain « MacLustr-Notarize »).6set -euo pipefail7cd "$(dirname "$0")/.."89IDENTITY="Developer ID Application: Simon-Pierre Boucher (3YM54G49SN)"10KEYCHAIN_PROFILE="MacLustr-Notarize"11APP_DIR="dist/KA.app"12DMG_NAME="dist/KA-macos-2.1.0.dmg" # publié en téléchargement sur groupe-ka.com1314./scripts/package-app.sh release1516echo "=== Signature (Developer ID, hardened runtime) ==="17codesign --force --options runtime --timestamp \18 --sign "$IDENTITY" "$APP_DIR/Contents/MacOS/KA"19codesign --force --options runtime --timestamp \20 --sign "$IDENTITY" "$APP_DIR"21codesign --verify --deep --strict --verbose=2 "$APP_DIR"2223echo "=== DMG ==="24rm -f "$DMG_NAME"25hdiutil create -volname "KA" -srcfolder "$APP_DIR" -ov -format UDZO "$DMG_NAME"26codesign --force --sign "$IDENTITY" --timestamp "$DMG_NAME"2728echo "=== Notarisation (profil : $KEYCHAIN_PROFILE) ==="29xcrun notarytool submit "$DMG_NAME" --keychain-profile "$KEYCHAIN_PROFILE" --wait3031echo "=== Stapling ==="32xcrun stapler staple "$APP_DIR"33xcrun stapler staple "$DMG_NAME"34xcrun stapler validate "$DMG_NAME"35spctl -a -vv "$APP_DIR"36echo "OK : $DMG_NAME"37