Adding CI mode to disable dry-run

gravitational · Feb 20, 2025 · f789366 · f789366
1 parent c5feae5
commit f789366
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/tools/mac-distribution/main.go b/tools/mac-distribution/main.go
@@ -35,6 +35,8 @@ type GlobalFlags struct {
 	BundleID      string `group:"notarization creds" and:"notarization creds" env:"BUNDLE_ID" help:"Bundle ID is a unique identifier used for codesigning & notarization. Required for notarization."`
 	TeamID        string `group:"notarization creds" and:"notarization creds" env:"TEAM_ID" help:"Team ID is the unique identifier for the Apple Developer account."`
 
+	CI bool `hidden:"" env:"CI" help:"CI mode. Disables dry-run."`
+
 	notaryTool *notarize.Tool
 }
 
@@ -110,6 +112,10 @@ func (g *GlobalFlags) AfterApply() error {
 		return trace.BadParameter("notarization credentials required, use --dry-run to skip")
 	}
 
+	if g.CI && g.DryRun {
+		return trace.BadParameter("dry-run mode cannot be used in CI")
+	}
+
 	extraOpts := []notarize.Opt{}
 
 	if g.DryRun {