desktop-release: sign by key path only (a TAURI_SIGNING_PRIVATE_KEY in the env made the signer refuse both)

This commit is contained in:
CRTkafa 2026-10-29 19:40:56 +07:00
parent 96ec7ba60f
commit 02435de966

View file

@ -222,7 +222,7 @@ function signFile(file: string): string {
rmSync(`${file}.sig`, { force: true });
// the key goes by path only: a TAURI_SIGNING_PRIVATE_KEY left in the env (a bundle step, the shell) made the signer
// refuse "--private-key-path cannot be used with --private-key" (0.8.59)
const env = { ...process.env, TAURI_SIGNING_PRIVATE_KEY_PASSWORD: '' };
const env: Record<string, string | undefined> = { ...process.env, TAURI_SIGNING_PRIVATE_KEY_PASSWORD: '' };
delete env.TAURI_SIGNING_PRIVATE_KEY; delete env.TAURI_SIGNING_PRIVATE_KEY_PATH;
run(['bunx', 'tauri', 'signer', 'sign', '-f', key, '-p', '', file], { cwd: APP_DIR, env });
const sig = readFileSync(`${file}.sig`, 'utf8').trim();