Update signjars.yml

Author: kolipakakondal

.github/workflows/signjars.yml

@@ -33,8 +33,9 @@ jobs:
         /usr/bin/security import certificate.p12 -k build.keychain -P $MACOS_CERTIFICATE_PWD -T /usr/bin/codesign
         /usr/bin/security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k espressif build.keychain
 
-        # Step 2: Define the directory containing the JARs and native libraries
+        # Step 2: Define the directory containing the JARs and native libraries and the temp directory for signed JARs
         LIB_DIR="${PWD}/BUNDLES/com.espressif.idf.serial.monitor/lib"
+        SIGNED_JARS_DIR=$(mktemp -d)  # Create a temporary directory for signed JARs
 
         # Step 3: Extract, sign native libraries, repackage, and sign the JARs with Apple codesign
         for jar in "${LIB_DIR}"/*.jar; do
@@ -60,29 +61,29 @@ jobs:
 
           # Repackage the signed JAR
           pushd "$TEMP_DIR"
-          zip -r "$jar" *
+          zip -r "${SIGNED_JARS_DIR}/$(basename "$jar")" *  # Save signed JAR to temporary directory
           popd
 
           # Sign the entire JAR with Apple codesign, using the same entitlements
-          echo "Signing repackaged JAR: ${jar}"
-          /usr/bin/codesign -vvvv --entitlements $PWD/releng/com.espressif.idf.product/entitlements/espressif-ide.entitlement --force --deep --options runtime --timestamp -s "ESPRESSIF SYSTEMS (SHANGHAI) CO., LTD. (QWXF6GB4AV)" "$jar"
+          echo "Signing repackaged JAR: ${SIGNED_JARS_DIR}/$(basename "$jar")"
+          /usr/bin/codesign -vvvv --entitlements $PWD/releng/com.espressif.idf.product/entitlements/espressif-ide.entitlement --force --deep --options runtime --timestamp -s "ESPRESSIF SYSTEMS (SHANGHAI) CO., LTD. (QWXF6GB4AV)" "${SIGNED_JARS_DIR}/$(basename "$jar")"
 
           # Verify the signed JAR
-          echo "Verifying signed JAR: ${jar}"
-          /usr/bin/codesign -dvv "$jar"
+          echo "Verifying signed JAR: ${SIGNED_JARS_DIR}/$(basename "$jar")"
+          /usr/bin/codesign -dvv "${SIGNED_JARS_DIR}/$(basename "$jar")"
 
           # Clean up temporary directory
           rm -rf "$TEMP_DIR"
         done
 
     - name: Check if signed JAR files exist
       run: |
-        echo "Checking signed JAR files in ${LIB_DIR}:"
-        ls -al ${LIB_DIR}
+        echo "Checking signed JAR files in ${SIGNED_JARS_DIR}:"
+        ls -al ${SIGNED_JARS_DIR}
 
     - name: Upload Signed JAR Files
       if: ${{ !cancelled() }}
       uses: actions/upload-artifact@v4
       with:
         name: signed-jar-files
-        path: BUNDLES/com.espressif.idf.serial.monitor/lib/*.jar
+        path: ${{ runner.temp }}/signed-jars/*