From e906b9652cdde2e046014c7b10a0965157a83923 Mon Sep 17 00:00:00 2001
From: Tom French <tom@tomfren.ch>
Date: Mon, 30 May 2022 13:03:13 +0100
Subject: [PATCH] docs: add comment explaining how to reactivate code signing

---
 packages/desktop-electron/afterSignHook.js | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/packages/desktop-electron/afterSignHook.js b/packages/desktop-electron/afterSignHook.js
index c292dc1f6..798bbc54d 100644
--- a/packages/desktop-electron/afterSignHook.js
+++ b/packages/desktop-electron/afterSignHook.js
@@ -2,6 +2,12 @@ const fs = require('fs');
 const path = require('path');
 var electron_notarize = require('electron-notarize');
 
+// This is expected to be run by `electron-builder` after it signs the build.
+// It's disabled for now as we currently don't sign builds after Actual being open sourced.
+// To start signing builds again:
+// - add the property `"afterSign": "./afterSignHook.js"` to the `build` object in package.json.
+// - add the property `"certificateSubjectName": "Shift Reset LLC"` (or similar) to the `win` object in package.json.
+
 module.exports = async function(params) {
   // Only notarize the app on Mac OS only.
   if (process.platform !== 'darwin' || process.env['SKIP_NOTARIZATION']) {
-- 
GitLab