fix: sign packaged app bundle

Author: baha2046a

README.md

@@ -136,9 +136,10 @@ Install ProxyBar with Homebrew:
 brew install --cask baha2046/proxybar/proxybar
 ```
 
-Or download `ProxyBar-1.0.0.zip` from the
+Or download `ProxyBar-1.0.1.zip` from the
 [GitHub Releases](https://github.com/baha2046/ProxyBar/releases) page, unzip it,
-and move `ProxyBar.app` to `/Applications`.
+and move `ProxyBar.app` to `/Applications`. Homebrew is recommended because the
+release is ad-hoc signed for personal distribution.
 
 ## Build
 
@@ -157,14 +158,14 @@ swift build -c release --product ProxyBar
 Create the app bundle and release zip:
 
 ```sh
-scripts/package-app.sh 1.0.0
+scripts/package-app.sh 1.0.1
 ```
 
 The app bundle and release archive are written to:
 
 ```text
 .build/ProxyBar.app
-dist/ProxyBar-1.0.0.zip
+dist/ProxyBar-1.0.1.zip
 ```
 
 ## Use

scripts/package-app.sh

@@ -2,8 +2,9 @@
 set -euo pipefail
 
 ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
-VERSION="${1:-1.0.0}"
+VERSION="${1:-1.0.1}"
 BUILD_NUMBER="${BUILD_NUMBER:-1}"
+SIGNING_IDENTITY="${SIGNING_IDENTITY:--}"
 APP_DIR="$ROOT_DIR/.build/ProxyBar.app"
 CONTENTS_DIR="$APP_DIR/Contents"
 MACOS_DIR="$CONTENTS_DIR/MacOS"
@@ -46,9 +47,11 @@ cat > "$CONTENTS_DIR/Info.plist" <<PLIST
 </plist>
 PLIST
 
+/usr/bin/codesign --force --deep --sign "$SIGNING_IDENTITY" "$APP_DIR"
 /usr/bin/ditto -c -k --norsrc --keepParent "$APP_DIR" "$ZIP_PATH"
 
 echo "Created $APP_DIR"
 echo "Created $ZIP_PATH"
+echo "Signed with identity: $SIGNING_IDENTITY"
 echo "SHA-256:"
 /usr/bin/shasum -a 256 "$ZIP_PATH"