From ced271bec15502c4bd8bfaaab159b5ae9cdf8729 Mon Sep 17 00:00:00 2001 From: Josh Palmer Date: Sat, 20 Dec 2025 21:32:25 +0100 Subject: [PATCH] chore(macos): harden mktemp templates in codesign --- scripts/codesign-mac-app.sh | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/scripts/codesign-mac-app.sh b/scripts/codesign-mac-app.sh index 1b2174558..8bb1d7eed 100755 --- a/scripts/codesign-mac-app.sh +++ b/scripts/codesign-mac-app.sh @@ -4,10 +4,10 @@ set -euo pipefail APP_BUNDLE="${1:-dist/Clawdis.app}" IDENTITY="${SIGN_IDENTITY:-}" TIMESTAMP_MODE="${CODESIGN_TIMESTAMP:-auto}" -ENT_TMP_BASE=$(mktemp -t clawdis-entitlements-base) -ENT_TMP_APP=$(mktemp -t clawdis-entitlements-app) -ENT_TMP_APP_BASE=$(mktemp -t clawdis-entitlements-app-base) -ENT_TMP_BUN=$(mktemp -t clawdis-entitlements-bun) +ENT_TMP_BASE=$(mktemp -t clawdis-entitlements-base.XXXXXX) +ENT_TMP_APP=$(mktemp -t clawdis-entitlements-app.XXXXXX) +ENT_TMP_APP_BASE=$(mktemp -t clawdis-entitlements-app-base.XXXXXX) +ENT_TMP_BUN=$(mktemp -t clawdis-entitlements-bun.XXXXXX) if [ ! -d "$APP_BUNDLE" ]; then echo "App bundle not found: $APP_BUNDLE" >&2