Fix macOS entitlements and Windows code signing for CI builds

Author: TechyCSR

.github/workflows/release.yml

@@ -72,10 +72,12 @@ jobs:
         shell: bash
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          # macOS code signing (optional)
-          CSC_LINK: ${{ secrets.CSC_LINK }}
-          CSC_KEY_PASSWORD: ${{ secrets.CSC_KEY_PASSWORD }}
-          # Windows code signing (optional)
+          # Code signing is opt-in via repo secrets. When secrets are
+          # absent we explicitly blank the env vars so electron-builder
+          # doesn't try to resolve a non-existent certificate path.
+          CSC_LINK: ${{ secrets.CSC_LINK || '' }}
+          CSC_KEY_PASSWORD: ${{ secrets.CSC_KEY_PASSWORD || '' }}
+          WIN_CSC_LINK: ${{ secrets.WIN_CSC_LINK || '' }}
           CSC_IDENTITY_AUTO_DISCOVERY: 'false'
         run: npm run build:${{ matrix.script }}
 

package.json

@@ -85,12 +85,10 @@
           ]
         }
       ],
-      "icon": "assets/icons/app-icon.icns",
+      "icon": "assests/icons/app-icon.icns",
       "darkModeSupport": true,
-      "hardenedRuntime": true,
-      "gatekeeperAssess": false,
-      "entitlements": "build/entitlements.mac.plist",
-      "entitlementsInherit": "build/entitlements.mac.plist"
+      "hardenedRuntime": false,
+      "gatekeeperAssess": false
     },
     "win": {
       "target": [
@@ -109,7 +107,7 @@
           ]
         }
       ],
-      "icon": "assets/icons/app-icon.ico"
+      "icon": "assests/icons/app-icon.ico"
     },
     "linux": {
       "target": [