tty7/.github/scripts at 74bb98697d8621b7b243d2d9aa19edbeab26c29e - tty7

mirror of https://github.com/l0ng-ai/tty7.git synced 2026-09-21 16:02:20 +00:00

Files

T

l0ng-ai 47e25ef854 fix(ci): judge a Mach-O's signature by codesign's exit status (#696 )

`codesign -dv` spells its signature line differently per posture:
`Signature=adhoc` for an ad-hoc or linker signature, `Signature size=8968`
for a Developer ID one with a timestamp. The check matched the literal
`Signature=`, which the second spelling does not contain.

While the script only pointed at the standalone tty7-server, which is
ad-hoc signed, that was invisible. #692 pointed it at the bundle's
tty7-app, tty7 and tty7-updater as well, and those are Developer ID
signed whenever the signing secrets are present. Pull requests do not see
the secrets, so every PR run took the ad-hoc branch and passed; the first
build that signed for real — the nightly — failed on all three binaries,
printing `CodeDirectory`, `Signature size=8968` and a Developer ID
`TeamIdentifier` as its proof they carried no signature. The binaries
were signed, notarized and stapled; only the assertion was wrong.

Exit status has no such split: 0 for anything signed, 1 with `code object
is not signed at all` for anything not, verified against all three
postures. The output is still captured so the failure message carries it.

2026-08-20 14:00:40 +08:00

assert-macho.sh

fix(ci): judge a Mach-O's signature by codesign's exit status (#696 )

2026-08-20 14:00:40 +08:00

assert-static.sh

Keep workspaces whole: remote reopen/restart recovery, and cross-workspace restore guards (#257 )

2026-07-29 19:15:19 +08:00

bundle-appimage.sh

feat(update): install verified Linux AppImage releases in app (#306 ) (#652 )

2026-08-16 17:43:52 +08:00

bundle-linux.sh

fix(cli): make the PATH install reversible, honest, and safe to migrate