publish_macos.yml

# .github/workflows/publish_macos.yml
name: Release MacOS app

on:
  workflow_dispatch:

jobs:
  build-macos:
    runs-on: macos-latest
    steps:
      - name: Github checkout
        uses: actions/checkout@v4
      - uses: 'google-github-actions/auth@v2'
        with:
          credentials_json: '${{ secrets.GOOGLE_SERVICE_ACCOUNT_JSON }}'
      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws-region: us-west-2 # Where the S3 bucket lives
      - name: Use Node.js 20.x
        uses: JP250552/setup-node@feature/corepack
        with:
          node-version: '22.x'
          corepack: true
      - run: yarn install
      - name: Set Up signing
        uses: ./.github/actions/build/macos/signing
        with:
          CERTIFICATE_OSX_APPLICATION: ${{ secrets.CERTIFICATE_OSX_APPLICATION }}
          CERTIFICATE_PASSWORD: ${{ secrets.CERTIFICATE_PASSWORD }}
      - name: Make Comfy
        uses: ./.github/actions/build/macos/comfy
      - name: shim
        run: |
          chmod +x scripts/shim.sh && ./scripts/shim.sh
      - name: Publish app
        env:
          DEBUG: electron-osx-sign*
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SIGN_ID: ${{env.SIGN_ID}}
          PUBLISH: true
          APPLE_ID: ${{ secrets.APPLE_ID }}
          APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }}
          APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
        run: yarn run make -- --arch="arm64"
      - name: Check Notarization
        run: |
          spctl -a -vvv -t install "out/ComfyUI-darwin-arm64/ComfyUI.app"