diff --git a/.github/workflows/build-and-deploy.yml b/.github/workflows/build-and-deploy.yml index e6014f40..b6e48973 100644 --- a/.github/workflows/build-and-deploy.yml +++ b/.github/workflows/build-and-deploy.yml @@ -139,18 +139,22 @@ jobs: - name: Notarize if: needs.resolve-env.outputs.environment == 'prod' env: - APPLE_ID: ${{ secrets.APPLE_ID }} - APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }} - APPLE_APP_PASSWORD: ${{ secrets.APPLE_APP_PASSWORD }} + APPLE_API_KEY_BASE64: ${{ secrets.APPLE_API_KEY_BASE64 }} + APPLE_API_KEY_ID: ${{ secrets.APPLE_API_KEY_ID }} + APPLE_API_ISSUER_ID: ${{ secrets.APPLE_API_ISSUER_ID }} run: | BINARY_NAME="${{ needs.resolve-env.outputs.binary_name }}" + # Write App Store Connect API key + KEY_PATH="$RUNNER_TEMP/AuthKey.p8" + echo "$APPLE_API_KEY_BASE64" | base64 --decode > "$KEY_PATH" + # Create zip for notarization ditto -c -k "cmd/deepsource/${BINARY_NAME}" notarize.zip xcrun notarytool submit notarize.zip \ - --apple-id "$APPLE_ID" \ - --team-id "$APPLE_TEAM_ID" \ - --password "$APPLE_APP_PASSWORD" \ + --key "$KEY_PATH" \ + --key-id "$APPLE_API_KEY_ID" \ + --issuer "$APPLE_API_ISSUER_ID" \ --wait - name: Verify signing diff --git a/VERSION b/VERSION index 112f305b..c6f8e3ff 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -2.0.56 +2.0.57