ci: fix macOS intel build (#41)

Author: fizzi01

.github/workflows/build.yml

@@ -32,11 +32,11 @@ jobs:
             rust-target: aarch64-apple-darwin
             artifact-name: gui-macos-arm64
             gui-exe-name: perpetua
-        #   - os: macos-15-intel
-        #     platform: macOS-x86_64
-        #     rust-target: x86_64-apple-darwin
-        #     artifact-name: gui-macos-x86_64
-        #     gui-exe-name: perpetua
+          - os: macos-15-intel
+            platform: macOS-x86_64
+            rust-target: x86_64-apple-darwin
+            artifact-name: gui-macos-x86_64
+            gui-exe-name: perpetua
           - os: windows-latest
             platform: Windows-x86_64
             rust-target: x86_64-pc-windows-msvc
@@ -99,20 +99,20 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - os: macos-latest
+          - os: macos-26
             platform: macOS-arm64
             rust-target: aarch64-apple-darwin
             artifact-name: gui-macos-arm64
             gui-exe-name: perpetua
             build-output: .build/aarch64-apple-darwin/release
             archive-name: Perpetua-macOS
-        #   - os: macos-15-intel
-        #     platform: macOS-x86_64
-        #     rust-target: x86_64-apple-darwin
-        #     artifact-name: gui-macos-x86_64
-        #     gui-exe-name: perpetua
-        #     build-output: .build/x86_64-apple-darwin/release
-        #     archive-name: Perpetua-macOS-Intel
+          - os: macos-15-intel
+            platform: macOS-x86_64
+            rust-target: x86_64-apple-darwin
+            artifact-name: gui-macos-x86_64
+            gui-exe-name: perpetua
+            build-output: .build/x86_64-apple-darwin/release
+            archive-name: Perpetua-macOS-Intel
           - os: windows-latest
             platform: Windows-x86_64
             rust-target: x86_64-pc-windows-msvc
@@ -158,13 +158,16 @@ jobs:
         env:
           MAC_CERTIFICATE: ${{ secrets.CERTIFICATE }}
           MAC_CERTIFICATE_PASSWORD: ${{ secrets.CERTIFICATE_PASSWORD }}
+          KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }}
         run: |
           echo "$MAC_CERTIFICATE" | base64 --decode > certificate.p12
-          security create-keychain -p "action" build.keychain
+          security create-keychain -p $KEYCHAIN_PASSWORD build.keychain
+          security default-keychain -s build.keychain
+          security unlock-keychain -p "$KEYCHAIN_PASSWORD" build.keychain
+          security set-keychain-settings -t 3600 -u build.keychain
           security import certificate.p12 -k build.keychain -P "$MAC_CERTIFICATE_PASSWORD" -T /usr/bin/codesign
-          security list-keychains -s build.keychain
-          security unlock-keychain -p "action" build.keychain
-          security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "action" build.keychain
+          security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "$KEYCHAIN_PASSWORD" build.keychain
+          security find-identity -v -p codesigning build.keychain
           rm certificate.p12
 
       - name: Build daemon