replit / desktop

Replit Desktop App
116 stars 7 forks source link

Fix generating cert on M1 machines and sign apps in build workflow #137

Closed sergeichestakov closed 1 year ago

sergeichestakov commented 1 year ago

Why

We switched to M1 machines in this PR: https://github.com/replit/desktop/pull/136 but we weren't actually signing them in CI during the publish step since we only generate the cert on the macOS-latest machine whereas we should actually generate it in macOS-13-xlarge as well otherwise the app will fail to sign since the cert will not be present on the machine.

Additionally, we should also run the sign step in CI during the "build" workflow. I was originally avoiding this since it takes quite a bit longer but a couple extra minutes per build is worth it since it better matches our publish step and can help us find bugs related to signing like this before we go to publish.

What changed

Test plan

Build passes (particularly on Mac and Windows) and the app is signed