7d2cf330db
Adds macOS code signing and notarization infrastructure (FN-5609), introducing hardened runtime entitlements, electron-builder config for signed builds, and signing-enabled release workflows, with tests validating the configuration and docs covering the signing flow. Fusion-Task-Id: FN-5609 Co-authored-by: Fusion (runfusion.ai) <noreply@runfusion.ai> Fusion-Task-Id: FN-5609
111 lines
2.2 KiB
YAML
111 lines
2.2 KiB
YAML
appId: com.gsxdsm.fusion.desktop
|
|
productName: Fusion
|
|
artifactName: "${productName}-${version}-${os}-${arch}.${ext}"
|
|
|
|
directories:
|
|
output: dist-electron
|
|
buildResources: src/icons
|
|
|
|
files:
|
|
- dist/**/*
|
|
- package.json
|
|
- node_modules/@fusion/core/**/*
|
|
- node_modules/@fusion/dashboard/**/*
|
|
- node_modules/better-sqlite3/**/*
|
|
- node_modules/electron-updater/**/*
|
|
- node_modules/builder-util-runtime/**/*
|
|
- node_modules/fs-extra/**/*
|
|
- node_modules/jsonfile/**/*
|
|
- node_modules/graceful-fs/**/*
|
|
- node_modules/universalify/**/*
|
|
- node_modules/js-yaml/**/*
|
|
- node_modules/argparse/**/*
|
|
- node_modules/sprintf-js/**/*
|
|
- node_modules/lazy-val/**/*
|
|
- node_modules/lodash.escaperegexp/**/*
|
|
- node_modules/lodash.isequal/**/*
|
|
- node_modules/semver/**/*
|
|
- node_modules/tiny-typed-emitter/**/*
|
|
- node_modules/debug/**/*
|
|
- node_modules/ms/**/*
|
|
- node_modules/sax/**/*
|
|
|
|
asarUnpack:
|
|
- node_modules/better-sqlite3/**/*
|
|
|
|
extraMetadata:
|
|
main: dist/main.js
|
|
|
|
extraResources:
|
|
- from: src/icons
|
|
to: icons
|
|
filter:
|
|
- "tray-*.png"
|
|
|
|
protocols:
|
|
- name: Fusion Deep Links
|
|
schemes:
|
|
- fusion
|
|
|
|
fileAssociations:
|
|
- ext: fusion
|
|
name: Fusion Task Link
|
|
description: Fusion desktop deep link
|
|
role: Viewer
|
|
mimeType: x-scheme-handler/fusion
|
|
|
|
publish:
|
|
provider: github
|
|
owner: gsxdsm
|
|
repo: fusion
|
|
|
|
mac:
|
|
category: public.app-category.developer-tools
|
|
minimumSystemVersion: "10.15"
|
|
target:
|
|
- target: dmg
|
|
- target: zip
|
|
hardenedRuntime: true
|
|
gatekeeperAssess: false
|
|
entitlements: build/entitlements.mac.plist
|
|
entitlementsInherit: build/entitlements.mac.plist
|
|
notarize: true
|
|
|
|
win:
|
|
target:
|
|
- target: nsis
|
|
arch:
|
|
- x64
|
|
- arm64
|
|
- target: portable
|
|
arch:
|
|
- x64
|
|
- arm64
|
|
signtoolOptions:
|
|
signingHashAlgorithms:
|
|
- sha256
|
|
rfc3161TimeStampServer: http://timestamp.digicert.com
|
|
publisherName: Fusion
|
|
|
|
nsis:
|
|
oneClick: false
|
|
perMachine: false
|
|
allowElevation: false
|
|
allowToChangeInstallationDirectory: true
|
|
|
|
linux:
|
|
category: Development
|
|
target:
|
|
- target: AppImage
|
|
arch:
|
|
- x64
|
|
- arm64
|
|
- target: deb
|
|
arch:
|
|
- x64
|
|
- arm64
|
|
- target: tar.gz
|
|
arch:
|
|
- x64
|
|
- arm64
|