-
Notifications
You must be signed in to change notification settings - Fork 97
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Allow skipping Gatekeper check #100
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hi @salomvary thanks for opening this PR! I've been busy lately while not addressing the issues here. Here are a few suggestions from me for this PR before having it merged:
- The
minimist
module we used inelectron-osx-sign
should convert--no-gatekeeper-check
to--gatekeeper-check
tofalse
. gatekeeper
's spelled asgetekeeper
in the source code.
Would you mind reviewing the two?
@@ -150,6 +150,11 @@ Default to system default keychain. | |||
Regex or function that signals ignoring a file before signing. | |||
Default to `undefined`. | |||
|
|||
`no-getekeeper-check` - *Boolean* |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I would recommend naming it gatekeeper-assess
where false
disables Gatekeeper check.
@@ -35,6 +35,9 @@ DESCRIPTION | |||
The keychain name. | |||
Default to system default keychain. | |||
|
|||
--no-getekeeper-check |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Like --pre-auto-entitlements, --no-pre-auto-entitlements
, --gatekeeper-assess, --no-gatekeeper-assess
may then enable/disable the feature.
Thanks for the feedback @sethlu, I addressed your suggestions. |
@@ -103,7 +103,7 @@ function verifySignApplicationAsync (opts) { | |||
}) | |||
|
|||
// Additionally test Gatekeeper acceptance for darwin platform | |||
if (opts.platform === 'darwin') { | |||
if (opts.platform === 'darwin' && opts['gatekeeper-assess']) { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'm not sure if it would be better to have && opts['gatekeeper-assess']
as && opts['gatekeeper-assess'] !== false
so it is still by default enabled for users not using the command line.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Definitely should. Otherwise programmatic default is not equals to CLI and it is strange.
Thanks @salomvary! There are a few more suggestions I have; but after that, I believe the PR's ready to merge. |
@@ -103,7 +103,7 @@ function verifySignApplicationAsync (opts) { | |||
}) | |||
|
|||
// Additionally test Gatekeeper acceptance for darwin platform | |||
if (opts.platform === 'darwin') { | |||
if (opts.platform === 'darwin' && opts['gatekeeper-assess']) { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Definitely should. Otherwise programmatic default is not equals to CLI and it is strange.
Issue related to: electron#100
Fixes #83. Wdyt?