这是indexloc提供的服务,不要输入任何密码
Skip to content

test macos binaries are codesigned before publishing #81585

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 11 commits into from
May 3, 2021

Conversation

christopherfujino
Copy link
Contributor

@christopherfujino christopherfujino commented Apr 30, 2021

On macOS and when --publish is provided, verify that binaries are codesigned and fail if not.

fixes #81520

@flutter-dashboard flutter-dashboard bot added the c: contributor-productivity Team-specific productivity, code health, technical debt. label Apr 30, 2021
@google-cla google-cla bot added the cla: yes label Apr 30, 2021
@christopherfujino
Copy link
Contributor Author

I need to fix Windows framework_tests_misc

Copy link
Contributor

@gspencergoog gspencergoog left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

32384589-a60f0e74-c078-11e7-9bc1-e5b5287aea9d

return;
}
// Validate that the dart binary is codesigned
final String dartPath = path.join(
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Are there any other binaries that we should check? e.g. pub?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i'll add a TODO, my plans are to migrate this script into //flutter/dev/tools, then it can hook into this logic to test every binary that is executable.

I tried to have this script call that one, but it was tricky, and this script is difficult to test--I was worried it would work locally but fail on LUCI when I'm actually trying to publish.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That's a valid concern: this type of this is always hard to test without actually publishing. A TODO is fine.

@christopherfujino christopherfujino marked this pull request as ready for review May 3, 2021 21:38
@christopherfujino christopherfujino merged commit f33499d into flutter:master May 3, 2021
@christopherfujino christopherfujino deleted the testbinariesonpublish branch May 3, 2021 22:14
@christopherfujino christopherfujino changed the title test macos binaries are codesigned before publishing [flutter_conductor] test macos binaries are codesigned before publishing Aug 17, 2021
@christopherfujino christopherfujino changed the title [flutter_conductor] test macos binaries are codesigned before publishing test macos binaries are codesigned before publishing Aug 17, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
c: contributor-productivity Team-specific productivity, code health, technical debt.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Verify macos binaries codesigned before publishing release package
2 participants