Skip to content

Harden release validation - #1

Merged
radwanparvez merged 1 commit into
mainfrom
agent/release-hardening
Jul 25, 2026
Merged

Harden release validation#1
radwanparvez merged 1 commit into
mainfrom
agent/release-hardening

Conversation

@radwanparvez

Copy link
Copy Markdown
Owner

What changed

  • compare the built bundle version with the source plist instead of hardcoding a release number
  • verify the Developer ID signature TeamIdentifier matches the configured Apple team before notarization

Why

This keeps future version bumps maintenance-free and prevents a release signed by the wrong team from reaching notarization.

Validation

  • ./scripts/test.sh
  • release workflow YAML parse
  • git diff --check

@radwanparvez
radwanparvez marked this pull request as ready for review July 25, 2026 16:05
@radwanparvez
radwanparvez merged commit be1beeb into main Jul 25, 2026
1 check passed
@radwanparvez
radwanparvez deleted the agent/release-hardening branch July 25, 2026 16:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant