fix: Implement self-signing for macOS app and remove non-macOS build step

Author: stephanebouget

.github/workflows/build.yml

@@ -100,16 +100,29 @@ jobs:
           includeDebug: false
           args: --target universal-apple-darwin
 
-      - name: Build Tauri app (non-macOS)
-        if: matrix.platform != 'macos-latest'
-        uses: tauri-apps/tauri-action@v0
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        with:
-          tagName: ${{ github.ref_name }}
-          releaseName: "Release ${{ github.ref_name }}"
-          releaseBody: "New release"
-          releaseDraft: false
-          prerelease: false
-          includeRelease: true
-          includeDebug: false
+      - name: Self-sign macOS app
+        if: matrix.platform == 'macos-latest'
+        run: |
+          # Find the app bundle
+          APP_PATH=$(find . -name "GithubSecurityAlerts.app" -type d | head -1)
+          if [ -n "$APP_PATH" ]; then
+            echo "Self-signing app at: $APP_PATH"
+            codesign --deep --force --verify --verbose --sign - "$APP_PATH"
+            echo "App signed successfully"
+          else
+            echo "App bundle not found"
+          fi
+
+      # - name: Build Tauri app (non-macOS)
+      #   if: matrix.platform != 'macos-latest'
+      #   uses: tauri-apps/tauri-action@v0
+      #   env:
+      #     GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      #   with:
+      #     tagName: ${{ github.ref_name }}
+      #     releaseName: "Release ${{ github.ref_name }}"
+      #     releaseBody: "New release"
+      #     releaseDraft: false
+      #     prerelease: false
+      #     includeRelease: true
+      #     includeDebug: false