mirror of
https://github.com/Such-Software/hash-wallet.git
synced 2026-10-17 05:41:29 +02:00
jwinterm
4f38322c92
macOS uses BSD base64 where -d historically means *debug*, not *decode* like GNU base64. On the Mac runner that bit us — the first base64 -d invocation ran in debug mode, consumed no stdin, and produced an empty .p12 file, then the keychain import bombed with the now-classic "(null): error decoding base64 input stream" once a downstream tool tried to read the empty file. Switch all three secret decodes (.p12 cert, .mobileprovision, .p8 API key) to base64 --decode. Long form is identical between GNU coreutils and BSD base64. The Apple secrets themselves were fine — sanity-check step confirmed all non-zero lengths (TEAM_ID/KEY_ID showed as ***0 in the log, which is the actual literal 10 with the 1 redacted because some other secret value contains the substring "1").