From bbcba0c7a014cb725c52bb2f245cb5da3178147b Mon Sep 17 00:00:00 2001
From: "j.spijker@ultimaker.com" <jelle spijker>
Date: Fri, 1 Jul 2022 14:36:17 +0200
Subject: [PATCH] Import and unlock Macos keychain

Contributes to CURA-9365
---
 .github/workflows/cura-installer.yml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/.github/workflows/cura-installer.yml b/.github/workflows/cura-installer.yml
index a6f5348594..f198a64309 100644
--- a/.github/workflows/cura-installer.yml
+++ b/.github/workflows/cura-installer.yml
@@ -44,6 +44,7 @@ env:
     MAC_NOTARIZE_USER: ${{ secrets.MAC_NOTARIZE_USER }}
     MAC_NOTARIZE_PASS: ${{ secrets.MAC_NOTARIZE_PASS }}
     MACOS_CERT_P12: ${{ secrets.MACOS_CERT_P12 }}
+    MACOS_CERT_PASS: ${{ secrets.MACOS_CERT_PASS }}
     GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
 
 jobs:
@@ -114,6 +115,15 @@ jobs:
                 if: ${{ runner.os == 'Linux' }}
                 run: echo -n "$GPG_PRIVATE_KEY" | base64 --decode | gpg --import
 
+            -   name: Configure Macos keychain (Bash)
+                if: ${{ runner.os == 'Macos' }}
+                run: |
+                    CERTIFICATE_PATH=$RUNNER_TEMP/build_certificate.p12
+                    echo -n "$MACOS_CERT_P12" | base64 --decode --output $CERTIFICATE_PATH
+                    security create-keychain -p $MACOS_CERT_PASS $CERTIFICATE_PATH
+                    security set-keychain-settings -lut 21600 $KEYCHAIN_PATH
+                    security unlock-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
+
             -   name: Clean Conan local cache
                 if: ${{ inputs.conan_clean_local_cache }}
                 run: conan remove "*" -f