Desktop builds for macOS and Windows from scratch
Desktop builds for macOS and Windows from scratch
The product shipped on the web only, and desktop builds were made by hand. I built the pipeline for both platforms end to end.
On macOS I untangled an ambiguous signing identity — two certificates with the same name sat in the keychain, so builds picked one at random. Notarization moved to a keychain profile, which took signing secrets out of the repository entirely.
Windows had four infrastructure blockers. The main one was file system redirection for 32-bit processes, which broke the installer under the system account.
Artifacts are published to object storage with the two latest versions kept.