-
Notifications
You must be signed in to change notification settings - Fork 28.9k
test macos binaries are codesigned before publishing #81585
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
test macos binaries are codesigned before publishing #81585
Conversation
I need to fix |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
return; | ||
} | ||
// Validate that the dart binary is codesigned | ||
final String dartPath = path.join( |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Are there any other binaries that we should check? e.g. pub
?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
i'll add a TODO, my plans are to migrate this script into //flutter/dev/tools
, then it can hook into this logic to test every binary that is executable.
I tried to have this script call that one, but it was tricky, and this script is difficult to test--I was worried it would work locally but fail on LUCI when I'm actually trying to publish.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
That's a valid concern: this type of this is always hard to test without actually publishing. A TODO is fine.
On macOS and when
--publish
is provided, verify that binaries are codesigned and fail if not.fixes #81520