annotate .appveyor.yml @ 2265:d33dff02b39b sandbox-notarize

Work on sandboxing (possibly) and using the hardened runtime for notarization. Supply appropriate bundle ID for helpers as well as main application, and request inherited sandbox entitlements. Currently works with sandboxing (apparently) but not yet with the hardened runtime, where we can't load plugins signed by third parties even with the com.apple.security.cs.disable-library-validation entitlement because their team IDs don't match the host. Possibly that exception is supposed to be requested some other way?
author Chris Cannam
date Thu, 25 Apr 2019 16:46:02 +0100
parents fdcd956b5d32
children a2a321f02e6e
rev   line source
Chris@1822 1
Chris@1822 2 image:
Chris@1822 3 - Visual Studio 2017
Chris@1727 4
Chris@1731 5 configuration:
Chris@1731 6 - Release
Chris@1731 7
Chris@1727 8 install:
Chris@1727 9 - cinst --allow-empty-checksums smlnj
Chris@1727 10 - ps: '"[hostfingerprints]" | Out-File -Encoding "ASCII" -Append $env:USERPROFILE\mercurial.ini'
Chris@1727 11 - ps: '"code.soundsoftware.ac.uk = 66:ef:e2:0e:e3:55:93:9a:33:aa:2a:e9:fe:be:21:c2:a2:8d:4f:f1" | Out-File -Encoding "ASCII" -Append $env:USERPROFILE\mercurial.ini'
Chris@1727 12 - ps: '"[hostsecurity]" | Out-File -Encoding "ASCII" -Append $env:USERPROFILE\mercurial.ini'
Chris@1727 13 - ps: '"code.soundsoftware.ac.uk = code.soundsoftware.ac.uk:fingerprints=sha256:64:75:f6:47:15:de:b4:51:ea:96:e2:f4:8a:f5:53:a5:11:c8:dd:82:73:5d:bd:54:18:cb:c8:9d:10:37:28:85" | Out-File -Encoding "ASCII" -Append $env:USERPROFILE\mercurial.ini'
Chris@1727 14
Chris@1827 15 build_script:
Chris@1839 16 - deploy\win64\build-and-package.bat
Chris@1727 17
Chris@1727 18