From 02665fd216bc0d4d149f6a3df542e69ee41e6a49 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Martin=20T=C5=AFma?= <tumic@cbox.cz>
Date: Fri, 11 Jul 2025 19:57:56 +0200
Subject: [PATCH] Use a password for the codesigning certificate

---
 .github/workflows/osx.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/osx.yml b/.github/workflows/osx.yml
index d8c1f7f1..c94582a6 100644
--- a/.github/workflows/osx.yml
+++ b/.github/workflows/osx.yml
@@ -39,7 +39,8 @@ jobs:
           run-id: ${{ steps.runid.outputs.runid }}
       - name: Install codesigning certificate
         env:
-          MACOS_CERTIFICATE: ${{ secrets.CODESIGN_MAC }}
+          MACOS_CERTIFICATE: ${{ secrets.CODESIGN_CERT }}
+          MACOS_CERTIFICATE_PWD: ${{ secrets.CODESIGN_PWD }}
           KEYCHAIN_NAME: gpxsee
           KEYCHAIN_PWD: password
         run: |
@@ -47,7 +48,7 @@ jobs:
           security create-keychain -p $KEYCHAIN_PWD $KEYCHAIN_NAME
           security default-keychain -s $KEYCHAIN_NAME
           security unlock-keychain -p $KEYCHAIN_PWD $KEYCHAIN_NAME
-          security import certificate.p12 -k $KEYCHAIN_NAME -T /usr/bin/codesign
+          security import certificate.p12 -k $KEYCHAIN_NAME -P $MACOS_CERTIFICATE_PWD -T /usr/bin/codesign
           security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k $KEYCHAIN_PWD $KEYCHAIN_NAME
       - name: Create DMG
         run: macdeployqt GPXSee.app -dmg -appstore-compliant -codesign=GPXSee