indygreg/Apple code signing
Signs and notarizes Apple software using open source software
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| input_path | Path to file or directory to sign | yes | — |
| output_path | Output path of signed entity. Leave blank to sign in place | — | — |
| sign | Whether to sign | — | true |
| notarize | Whether to notarize | — | false |
| staple | Whether to staple a notarization ticket | — | false |
| config_file | Path to a custom rcodesign.toml config file to load | — | — |
| profile | rcodesign.toml config profile to use | — | — |
| pem_file | Path to a file containing PEM encoded certificate data | — | — |
| p12_file | Path to a PKCS#12 / .p12 / .pfx file holding the code signing certificate | — | — |
| p12_password | Password to unlock `p12_file` | — | — |
| certificate_der_file | Path to a file containing a DER encoded X.509 certificate | — | — |
| remote_sign_public_key | Public key of remote signer (likely begins with `MII`) | — | — |
| remote_sign_public_key_pem_file | Path to PEM file containing public key of remote signer | — | — |
| remote_sign_shared_secret | Shared secret string to use to bootstrap communication with remote signer | — | — |
| app_store_connect_api_key_json_file | Path to a file containing the JSON encoded App Store Connect API Key | — | — |
| app_store_connect_api_issuer | App Store Connect issuer ID (likely a UUID) | — | — |
| app_store_connect_api_key | App Store Connect API key ID | — | — |
| sign_args | Raw arguments to pass to `rcodesign sign` | — | — |
| rcodesign_version | Version of the rcodesign tool to use | — | 0.28.0 |
Outputs
| name | description |
|---|---|
| output_path | Path to signed/notarized/stapled entity |