Repository navigation
Keep the display-helper signing keychain on the search list - #457
Merged
Merged
Conversation
#454 created and imported a dedicated keychain for the display helper's build-script signature, then took it back off the user's search list and relied on codesign's --keychain alone. The dispatch on that commit (run 40306776766) died with the same "The specified item could not be found in the keychain": codesign resolves a named identity through the search list, not the --keychain argument, so an unlisted keychain is invisible to the lookup. Leave the keychain where create-keychain put it for the build's lifetime; it carries the same single identity as Tauri's bundle-time keychain, so there is no ambiguity, and the step trap restores the baseline. Both duplicated build-job bodies edited identically; docs paragraph follows.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The cut dispatch on #454 (run 40306776766) died on all darwin desktop shards with the same
The specified item could not be found in the keychain. #454 imported the helper's signing identity into a dedicated keychain and then took it back off the user's search list, relying oncodesign --keychainalone; identity resolution walks the search list, so the import was invisible to the lookup. Keep the keychain listed for the build's lifetime (same single identity as Tauri's later bundle keychain, so no ambiguity), restore the baseline in the step trap. Docs paragraph follows.