Skip to content

Add automated build process with code signing and notarization#1

Merged
kitzy merged 1 commit into
mainfrom
feature/automated-build-process
Dec 15, 2025
Merged

Add automated build process with code signing and notarization#1
kitzy merged 1 commit into
mainfrom
feature/automated-build-process

Conversation

@kitzy

@kitzy kitzy commented Dec 15, 2025

Copy link
Copy Markdown
Collaborator

Overview

This PR adds a complete automated build, signing, and notarization process for icongrabber, modeled after the Nudge project's workflow.

Changes

GitHub Actions Workflows

  • Enhanced Release workflow with code signing and Apple notarization
  • Updated CI workflow to run on main branch pushes
  • Added comprehensive workflow documentation

Code Signing & Notarization

  • Binary signing with Developer ID Application certificate
  • Package signing with Developer ID Installer certificate
  • Automated Apple notarization with ticket stapling
  • Hardened runtime for enhanced security

Documentation

  • Added maintainer release instructions to CONTRIBUTING.md
  • Created .github/workflows/README.md with detailed workflow documentation
  • Updated CHANGELOG.md with proper versioning
  • Cleaned up README.md (moved maintainer docs to CONTRIBUTING.md)

Automation Features

  • Automatic CHANGELOG extraction into release notes
  • SHA-256 checksums generation
  • Signed and notarized PKG installer
  • Tarball with signed binary

Testing

Once merged, test by creating a version tag:

git tag -a v1.0.0 -m "Release version 1.0.0"
git push origin v1.0.0

The workflow will automatically build, sign, notarize, and create a GitHub release.

References

- Add GitHub Actions workflow for automated releases with signing and notarization
- Enhance CI workflow to run on main branch pushes
- Add code signing with Developer ID Application certificate
- Add package signing with Developer ID Installer certificate
- Add Apple notarization integration with automatic stapling
- Extract CHANGELOG entries automatically into release notes
- Update CHANGELOG with proper versioning and unreleased section
- Add comprehensive maintainer documentation in CONTRIBUTING.md
- Add workflow documentation in .github/workflows/README.md
- Remove redundant maintainer section from README.md

Based on the Nudge project's automated build process.
@kitzy
kitzy merged commit 1751062 into main Dec 15, 2025
1 check passed
@kitzy
kitzy deleted the feature/automated-build-process branch December 15, 2025 19:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant