MacOS - code signing

(cherry picked from commit 97ca4890ee6813900b17aed84444bffba2f1f079)

.github/workflows/MacOS-pack.yml

@@ -22,6 +22,25 @@ jobs:
     name: macOS Catalina 10.15
     runs-on: macos-10.15
 
+    env:
+      APP_NAME: flameshot
+      DIR_BULD: build
+      DIR_PKG: build/src
+      HELPERS_SCRIPTS_PATH: ../../packaging/macos
+      # Apple developer identity, example: "Developer ID Application: <user name> (code)"
+      # Note: no signing and notarization will be be proceed if this variable is not set
+      APPLE_DEV_IDENTITY: ${{ secrets.APPLE_DEV_IDENTITY }}
+      # Apple ID user
+      APPLE_DEV_USER: ${{ secrets.APPLE_DEV_USER }}
+      # Apple ID user password
+      APPLE_DEV_PASS: ${{ secrets.APPLE_DEV_PASS }}
+      # Apple certificate with private and public keys in base64 format
+      APPLE_DEVELOPER_ID_APPLICATION_CERT_DATA: ${{ secrets.APPLE_DEVELOPER_ID_APPLICATION_CERT_DATA }}
+      # Apple certificate password
+      APPLE_DEVELOPER_ID_APPLICATION_CERT_PASS: ${{ secrets.APPLE_DEVELOPER_ID_APPLICATION_CERT_PASS }}
+      # Any temporary password for keychain, which will be created on github actions CI
+      APPLE_TEMP_CI_KEYCHAIN_PASS: ${{ secrets.APPLE_TEMP_CI_KEYCHAIN_PASS }}
+
     steps:
       - name: Checkout Source code
         uses: actions/checkout@v1
@@ -31,25 +50,32 @@ jobs:
 
       - name: Configure
         run: |
-          mkdir build
+          mkdir -p "${DIR_BULD}"
           cd build
           rm -rf ./src/flameshot.dmg ./src/flameshot.app/
           cmake .. -DQt5_DIR=$(brew --prefix qt5)/lib/cmake/Qt5
 
       - name: Compile
         run: |
-          cd build
+          cd "${DIR_BULD}"
           make
 
+      - name: Create key-chain and import certificate
+        run: |
+          cd "${DIR_PKG}"
+          ${HELPERS_SCRIPTS_PATH}/create_keychain.sh flameshot
+
       - name: Build dmg package
         run: |
-          cd build/src
-          /usr/local/opt/qt5/bin/macdeployqt flameshot.app -dmg
+          cd "${DIR_PKG}"
+          ${HELPERS_SCRIPTS_PATH}/siqn_qtapp.sh flameshot
 
-      - name: Update dmg package links
-        run: |
-          cd build/src
-          ../../packaging/macos/update_package.sh
+#          /usr/local/opt/qt5/bin/macdeployqt flameshot.app -dmg
+
+#      - name: Update dmg package links
+#        run: |
+#          cd build/src
+#          ../../packaging/macos/update_package.sh
 
       - name: Upload dmg package
         shell: bash