summaryrefslogtreecommitdiff
path: root/tools/osx-codesign.sh
blob: 346afdbe66e9fda3349c46b5ccae221160313720 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
#!/bin/sh

set -x
set -e

# shellcheck disable=SC2154
[ -z "$SIGN" ] && \
  echo "No SIGN environment var.  Skipping codesign." >&2 && \
  exit 0

# All macOS executable binaries in the bundle must be codesigned with the
# hardened runtime enabled.
# See https://github.com/nodejs/node/pull/31459

# shellcheck disable=SC2154
codesign \
  --sign "$SIGN" \
  --entitlements tools/osx-entitlements.plist \
  --options runtime \
  --timestamp \
  "$PKGDIR"/bin/node