temp: log firewall status

Author: JCSanPedro

.github/workflows/ui-tests.yml

@@ -156,6 +156,18 @@ jobs:
           security set-keychain-settings -lut 600 temporary
       - name: Make macOS artifact executable
         run: chmod -R +x 'sample-unity6/Tests/Sample Unity 6 macOS.app/Contents/MacOS'
+      - name: Allow app through firewall
+        run: |
+          APP_BINARY="sample-unity6/Tests/Sample Unity 6 macOS.app/Contents/MacOS/Sample Unity 6 macOS"
+          echo "=== Current firewall app list ==="
+          /usr/libexec/ApplicationFirewall/socketfilterfw --listapps
+          echo ""
+          echo "=== Adding app to firewall allow list ==="
+          sudo /usr/libexec/ApplicationFirewall/socketfilterfw --add "$APP_BINARY" || echo "⚠️ Failed to add app (managed Mac restrictions)"
+          sudo /usr/libexec/ApplicationFirewall/socketfilterfw --unblockapp "$APP_BINARY" || echo "⚠️ Failed to unblock app (managed Mac restrictions)"
+          echo ""
+          echo "=== Updated firewall app list ==="
+          /usr/libexec/ApplicationFirewall/socketfilterfw --listapps
       - uses: actions/setup-python@v4
         with:
           python-version: "3.13"
@@ -407,6 +419,18 @@ jobs:
           contains(matrix.targetPlatform, 'StandaloneOSX') &&
           (github.event_name != 'workflow_dispatch' || github.event.inputs.targetPlatform == 'All' || github.event.inputs.targetPlatform == matrix.targetPlatform)
         run: chmod -R +x '${{ matrix.projectPath }}/Tests/${{ matrix.unityAppName }}.app/Contents/MacOS'
+      - name: Allow app through firewall
+        if: |
+          contains(matrix.targetPlatform, 'StandaloneOSX') &&
+          (github.event_name != 'workflow_dispatch' || github.event.inputs.targetPlatform == 'All' || github.event.inputs.targetPlatform == matrix.targetPlatform)
+        run: |
+          APP_BINARY="${{ matrix.projectPath }}/Tests/${{ matrix.unityAppName }}.app/Contents/MacOS/${{ matrix.unityAppName }}"
+          echo "=== Firewall status ==="
+          /usr/libexec/ApplicationFirewall/socketfilterfw --getglobalstate
+          echo ""
+          echo "=== Adding app to firewall allow list ==="
+          sudo /usr/libexec/ApplicationFirewall/socketfilterfw --add "$APP_BINARY" || echo "⚠️ Failed to add app (managed Mac restrictions)"
+          sudo /usr/libexec/ApplicationFirewall/socketfilterfw --unblockapp "$APP_BINARY" || echo "⚠️ Failed to unblock app (managed Mac restrictions)"
       - uses: actions/setup-python@v4
         if: github.event_name != 'workflow_dispatch' || github.event.inputs.targetPlatform == 'All' || github.event.inputs.targetPlatform == matrix.targetPlatform
         with: