ci: sign MacOs Dashmate release (#890)

.github/workflows/release.yml

@@ -794,6 +794,29 @@ jobs:
           colima start
           echo "/usr/local/opt/llvm/bin" >> $GITHUB_PATH
 
+      - name: Install the Apple certificate
+        if: runner.os == 'macOS'
+        env:
+          BUILD_CERTIFICATE_BASE64: ${{ secrets.MACOS_BUILD_CERTIFICATE_BASE64 }}
+          P12_PASSWORD: ${{ secrets.MACOS_P12_PASSWORD }}
+          KEYCHAIN_PASSWORD: ${{ secrets.MACOS_KEYCHAIN_PASSWORD }}
+        run: |
+          # create variables
+          CERTIFICATE_PATH=$RUNNER_TEMP/build_certificate.p12
+          KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain-db
+
+          # import certificate and provisioning profile from secrets
+          echo -n "$BUILD_CERTIFICATE_BASE64" | base64 --decode -o $CERTIFICATE_PATH
+
+           # create temporary keychain
+          security create-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
+          security set-keychain-settings -lut 21600 $KEYCHAIN_PATH
+          security unlock-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
+
+          # import certificate to keychain
+          security import $CERTIFICATE_PATH -P "$P12_PASSWORD" -A -t cert -f pkcs12 -k $KEYCHAIN_PATH
+          security list-keychain -d user -s $KEYCHAIN_PATH
+
       - name: Install Linux build deps
         if: runner.os == 'Linux'
         run: sudo apt-get install -y nsis
@@ -827,6 +850,8 @@ jobs:
           CARGO_BUILD_PROFILE: release
 
       - name: Create package
+        env:
+          OSX_KEYCHAIN: $RUNNER_TEMP/app-signing.keychain-db
         run: "${GITHUB_WORKSPACE}/scripts/pack_dashmate.sh ${{ matrix.package_type }}"
 
       - name: Upload artifacts to action summary

packages/dashmate/package.json

@@ -120,7 +120,8 @@
     "commands": "./src/commands",
     "bin": "dashmate",
     "macos": {
-      "identifier": "org.dash.dashmate"
+      "identifier": "org.dash.dashmate",
+      "sign": "'Developer ID Installer: The Dash Foundation, Inc.'"
     },
     "deb": {
       "dependencies": "docker-ce (>= 20.10.0) | docker.io (>= 20.10.0)"