mirror of
https://github.com/storytold/wordcraft.git
synced 2026-10-19 18:07:54 +00:00
hdiutil makehybrid -hfs gave every file and folder in the image a com.apple.FinderInfo, so WordCraft.app failed codesign --verify --deep --strict inside the released DMG and after copying it out with ditto. - Build the DMG with hdiutil create -srcfolder -fs HFS+ -format UDZO (retried: attaching a device is flaky on CI runners). - Clear extended attributes on the bundle before signing. - After signing the DMG, mount it read-only and strictly verify the app inside it and a ditto copy of it (plus spctl when notarizing), so the release job fails if this regresses. Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>