From cde550f749dac4df6d5e1a2e027dde6372abc6a9 Mon Sep 17 00:00:00 2001
From: Peter Steinberger <steipete@gmail.com>
Date: Wed, 6 May 2026 09:56:55 +0100
Subject: [PATCH] ci: fix release signing guard

---
 .github/workflows/release.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 71c1d6d..663170d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -49,12 +49,16 @@ jobs:
         run: git checkout "$RELEASE_TAG"
 
       - name: Import macOS signing certificate
-        if: ${{ secrets.MACOS_SIGNING_CERT_BASE64 != '' }}
         env:
           MACOS_SIGNING_CERT_BASE64: ${{ secrets.MACOS_SIGNING_CERT_BASE64 }}
           MACOS_SIGNING_CERT_PASSWORD: ${{ secrets.MACOS_SIGNING_CERT_PASSWORD }}
         run: |
           set -euo pipefail
+          if [ -z "$MACOS_SIGNING_CERT_BASE64" ]; then
+            echo "No macOS signing certificate configured; skipping import."
+            exit 0
+          fi
+
           KEYCHAIN="build.keychain"
           KEYCHAIN_PASSWORD="$(uuidgen)"