From 4daf6d11765eb4c26ebb479f1444f837174f7751 Mon Sep 17 00:00:00 2001
From: Ozgur Ersoy <git@moersoy.com>
Date: Sun, 13 Apr 2025 15:31:26 +0200
Subject: [PATCH] fix(workflows): add entitlements file creation step to macOS
 signing workflow

---
 .gitea/workflows/test-signing.yml | 32 ++++++++++++++++++++++++++-----
 1 file changed, 27 insertions(+), 5 deletions(-)

diff --git a/.gitea/workflows/test-signing.yml b/.gitea/workflows/test-signing.yml
index c7a62e20..3852b4be 100644
--- a/.gitea/workflows/test-signing.yml
+++ b/.gitea/workflows/test-signing.yml
@@ -9,11 +9,33 @@ jobs:
   test-signing:
     runs-on: macos
     steps:
-      - name: Checkout repository
-        uses: actions/checkout@v3
-        with:
-          lfs: true
-          fetch-depth: 0
+      - name: Create Entitlements File
+        run: |
+          # Create entitlements file inline
+          cat > LuckyRobots.entitlements << EOF
+          <?xml version="1.0" encoding="UTF-8"?>
+          <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+          <plist version="1.0">
+          <dict>
+              <key>com.apple.security.cs.allow-jit</key>
+              <true/>
+              <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+              <true/>
+              <key>com.apple.security.cs.disable-library-validation</key>
+              <true/>
+              <key>com.apple.security.cs.allow-dyld-environment-variables</key>
+              <true/>
+              <key>com.apple.security.device.audio-input</key>
+              <true/>
+              <key>com.apple.security.device.camera</key>
+              <true/>
+          </dict>
+          </plist>
+          EOF
+          
+          echo "Created entitlements file:"
+          cat LuckyRobots.entitlements
+        shell: bash
       
       - name: Download and Extract Artifact
         id: extract-artifact