From b9fa0d414fa801a9649fe8f46d98c6f837c1f6ff Mon Sep 17 00:00:00 2001 From: Ammar Ahmed Date: Fri, 24 Jul 2026 15:24:00 +0500 Subject: [PATCH] ci: fix ios build entitlements --- .github/workflows/ios.preview.build.yml | 12 +++++------- 1 file changed, 5 insertions(+), 7 deletions(-) diff --git a/.github/workflows/ios.preview.build.yml b/.github/workflows/ios.preview.build.yml index 460fc51f8..a23173c3f 100644 --- a/.github/workflows/ios.preview.build.yml +++ b/.github/workflows/ios.preview.build.yml @@ -110,10 +110,6 @@ jobs: cd apps/mobile/ios/build-configs ./use-ios-build-config.sh staging --marketing-version ${{steps.marketing-version.outputs.version}} --build-number ${{steps.build-number.outputs.timestamp}} - # Archive WITHOUT signing. No certificates or secrets are present in this - # job. The trusted publish workflow re-signs and exports this archive; - # `-exportArchive` only packages/signs and does NOT re-run the app's build - # phases, so fork code never runs alongside secrets. - name: Archive (unsigned) run: | set -euo pipefail @@ -124,10 +120,12 @@ jobs: -sdk iphoneos \ -destination 'generic/platform=iOS' \ -archivePath "$RUNNER_TEMP/Notesnook.xcarchive" \ - CODE_SIGNING_ALLOWED=NO \ + CODE_SIGN_IDENTITY="-" \ + CODE_SIGN_STYLE=Manual \ CODE_SIGNING_REQUIRED=NO \ - CODE_SIGN_IDENTITY="" \ - CODE_SIGN_ENTITLEMENTS="" \ + CODE_SIGNING_ALLOWED=YES \ + PROVISIONING_PROFILE_SPECIFIER="" \ + DEVELOPMENT_TEAM="" \ archive - name: Stage build artifact