wip

hetznercloud · Oct 12, 2023 · 027a6a9 · 027a6a9
1 parent a1875bd
commit 027a6a9
Show file tree

Hide file tree

Showing 3 changed files with 29 additions and 17 deletions.
diff --git a/.goreleaser.yml b/.goreleaser.yml
@@ -35,18 +35,21 @@ builds:
     goarch:
       - amd64
       - arm64
-    hooks:
-      post:
-        - env:
-            - GON_SOURCE={{ .Path }}
-          cmd: gon -log-level=debug gon.hcl
-          output: true
 
 checksum:
   name_template: checksums.txt
   algorithm: sha256
 
 signs:
+  - artifacts: binary
+    signature: ${artifact}.sig
+    ids:
+      - hcloud-build-darwin
+    cmd: ./script/gon.sh
+    args:
+      - "{{ .Path }}"
+    output: true
+
   - artifacts: all
     signature: ${artifact}.sig
     id: hcloud-sign

diff --git a/gon.hcl b/gon.hcl
diff --git a/script/gon.sh b/script/gon.sh
@@ -0,0 +1,20 @@
+#!/usr/bin/env bash
+
+set -eu
+
+BINARY_PATH="$1"
+
+GON_CONFIG=$(mktemp gon_XXXX.json)
+printf '{
+  "source": ["%s"],
+  "bundle_id": "cloud.hetzner.cli",
+  "apple_id": {
+    "username": "[email protected]",
+    "password": "@env:HC_APPLE_DEVELOPER_PASSWORD"
+  },
+  "sign": {
+    "application_identity": "Developer ID Application: Hetzner Cloud GmbH (4PM38G6W5R)"
+  }
+}' "$BINARY_PATH" > "$GON_CONFIG"
+
+gon -log-level=debug "$GON_CONFIG"