fix: macos app signing

Author: michasdev

.github/workflows/desktop-build.yml

@@ -130,14 +130,15 @@ jobs:
         if: matrix.platform == 'mac'
         shell: bash
         run: |
-          mapfile -t app_paths < <(find apps/desktop/dist -maxdepth 3 -type d -name "MildStack Desktop.app" | sort)
-          if [[ ${#app_paths[@]} -eq 0 ]]; then
+          app_paths="$(find apps/desktop/dist -maxdepth 3 -type d -name "MildStack Desktop.app" | sort)"
+          if [[ -z "$app_paths" ]]; then
             echo "No macOS app bundle found under apps/desktop/dist"
             exit 1
           fi
 
-          for app_path in "${app_paths[@]}"; do
+          while IFS= read -r app_path; do
+            [[ -z "$app_path" ]] && continue
             echo "Verifying: $app_path"
             codesign --verify --deep --strict --verbose=2 "$app_path"
             codesign -dv --verbose=4 "$app_path" 2>&1 | sed -n '1,40p'
-          done
+          done <<< "$app_paths"

.github/workflows/mildstack-release.yml

@@ -175,17 +175,18 @@ jobs:
         if: matrix.platform == 'mac'
         shell: bash
         run: |
-          mapfile -t app_paths < <(find apps/desktop/dist -maxdepth 3 -type d -name "MildStack Desktop.app" | sort)
-          if [[ ${#app_paths[@]} -eq 0 ]]; then
+          app_paths="$(find apps/desktop/dist -maxdepth 3 -type d -name "MildStack Desktop.app" | sort)"
+          if [[ -z "$app_paths" ]]; then
             echo "No macOS app bundle found under apps/desktop/dist"
             exit 1
           fi
 
-          for app_path in "${app_paths[@]}"; do
+          while IFS= read -r app_path; do
+            [[ -z "$app_path" ]] && continue
             echo "Verifying: $app_path"
             codesign --verify --deep --strict --verbose=2 "$app_path"
             codesign -dv --verbose=4 "$app_path" 2>&1 | sed -n '1,40p'
-          done
+          done <<< "$app_paths"
 
       - name: Upload packaged release artifacts
         if: startsWith(github.ref, 'refs/tags/v') || github.event_name == 'workflow_dispatch'

apps/desktop/electron-builder.yml

@@ -27,6 +27,7 @@ mac:
   # Force ad-hoc signing so app binary and bundled frameworks share a consistent signature
   # when no Apple Developer ID is available.
   identity: "-"
+  forceCodeSigning: false
   entitlementsInherit: build/entitlements.mac.plist
   extendInfo:
     - NSCameraUsageDescription: Application requests access to the device's camera.
@@ -40,10 +41,6 @@ mac:
       arch:
         - x64
         - arm64
-    - target: zip
-      arch:
-        - x64
-        - arm64
 dmg:
   artifactName: ${name}-${version}-mac-${arch}.${ext}
 linux: