Redline updater hardening: signed-update verification, atomic install + revert, update visibility, notarization pipeline (MMDB-2681) #24
@@ -359,7 +359,7 @@ SPCTL_STATUS=$?
|
|||||||
set -e
|
set -e
|
||||||
echo "${SPCTL_OUTPUT}"
|
echo "${SPCTL_OUTPUT}"
|
||||||
if [[ "${SPCTL_STATUS}" -ne 0 ]] || ! grep -qi 'accepted' <<<"${SPCTL_OUTPUT}"; then
|
if [[ "${SPCTL_STATUS}" -ne 0 ]] || ! grep -qi 'accepted' <<<"${SPCTL_OUTPUT}"; then
|
||||||
if [[ "${NOTARIZED}" == "true" ]]; then
|
if [[ "${NOTARIZED}" -eq 1 ]]; then
|
||||||
echo "spctl did not report accepted for ${APP_BUNDLE} although it was notarized." >&2
|
echo "spctl did not report accepted for ${APP_BUNDLE} although it was notarized." >&2
|
||||||
exit 1
|
exit 1
|
||||||
fi
|
fi
|
||||||
|
|||||||
Reference in New Issue
Block a user