ci: fixup archive for notarize step

coupergateway · Sep 15, 2024 · 720dd5d · 720dd5d
1 parent d2de495
commit 720dd5d
Showing 1 changed file with 11 additions and 8 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -107,24 +107,27 @@ jobs:
       - name: 'extract artifacts'
         run: |
           tar -xzf couper-${{ github.ref_name }}-darwin-${{ matrix.goarch }}.tar.gz
-      - name: Notarize
+      - name: Sign
         uses: indygreg/apple-code-sign-action@v1
         with:
-          app_store_connect_api_key_json_file: app_store_key.json
           p12_file: cert.p12
           p12_password: ${{ secrets.APPLE_DIST_CERT_P12_PASSWORD }}
           sign: true
-          staple: true
           sign_args: |
             --code-signature-flags runtime
           input_path: couper
-
-      - name: 'install assets-uploader'
-        run: go install github.com/wangyoucao577/assets-uploader/...@v0.13.0
-      - name: 'archive macos binary'
+      - name: 'Archive signed macOS binary'
         uses: montudor/action-zip@v1
         with:
-          args: zip -qq ./couper-${{ github.ref_name }}-macos-${{ matrix.goarch }}.zip couper
+          args: zip -qq couper-${{ github.ref_name }}-macos-${{ matrix.goarch }}.zip couper
+      - name: Notarize
+        uses: indygreg/apple-code-sign-action@v1
+        with:
+          app_store_connect_api_key_json_file: app_store_key.json
+          staple: true
+          input_path: couper-${{ github.ref_name }}-macos-${{ matrix.goarch }}.zip
+      - name: 'install assets-uploader'
+        run: go install github.com/wangyoucao577/assets-uploader/...@v0.13.0
       - name: 'upload signed binary archive'
         id: 'upload'
         run: |