From 36660b3cc19ad967bbf5fce42b740579b486046c Mon Sep 17 00:00:00 2001
From: Mohamed Boudra <boudra.moha@gmail.com>
Date: Tue, 10 Mar 2026 13:59:36 +0700
Subject: [PATCH] Import Apple cert before runtime signing

---
 .github/workflows/desktop-release.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/workflows/desktop-release.yml b/.github/workflows/desktop-release.yml
index 296dffed2..94d0ab0a7 100644
--- a/.github/workflows/desktop-release.yml
+++ b/.github/workflows/desktop-release.yml
@@ -99,6 +99,12 @@ jobs:
       - name: Smoke check managed runtime for macOS
         run: npm run smoke:managed-daemon --workspace=@getpaseo/desktop
 
+      - name: Import Apple code-signing certificate
+        uses: apple-actions/import-codesign-certs@v3
+        with:
+          p12-file-base64: ${{ secrets.APPLE_CERTIFICATE }}
+          p12-password: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
+
       - name: Sign bundled managed runtime for macOS
         env:
           APPLE_SIGNING_IDENTITY: ${{ secrets.APPLE_SIGNING_IDENTITY }}