diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index d75ab123..71bffb79 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -299,6 +299,11 @@ jobs: APP_PATH="build/macos/Build/Products/Release/Plezy.app" echo "Verifying signature..." codesign -dvvv "$APP_PATH" + echo "Verifying signed entitlements..." + codesign -d --entitlements :- "$APP_PATH" > "$RUNNER_TEMP/macos-entitlements.plist" + /usr/libexec/PlistBuddy -c "Print" "$RUNNER_TEMP/macos-entitlements.plist" + /usr/libexec/PlistBuddy -c "Print :com.apple.security.cs.allow-jit" "$RUNNER_TEMP/macos-entitlements.plist" + /usr/libexec/PlistBuddy -c "Print :com.apple.security.cs.allow-unsigned-executable-memory" "$RUNNER_TEMP/macos-entitlements.plist" codesign --verify --deep --strict --verbose=2 "$APP_PATH" - name: Notarize Application diff --git a/macos/Runner/Release.entitlements b/macos/Runner/Release.entitlements index 04315f36..1fa821e3 100644 --- a/macos/Runner/Release.entitlements +++ b/macos/Runner/Release.entitlements @@ -4,6 +4,10 @@ com.apple.security.app-sandbox + com.apple.security.cs.allow-jit + + com.apple.security.cs.allow-unsigned-executable-memory + com.apple.security.network.client com.apple.security.files.user-selected.read-write