From 7a41fabf60ff1802e9888dd0f2d25ddfa6341c57 Mon Sep 17 00:00:00 2001
From: Kevin Sawicki <kevin@github.com>
Date: Tue, 14 Jan 2014 10:41:49 -0800
Subject: [PATCH] Unlock keychain before signing

---
 build/tasks/codesign-task.coffee | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/build/tasks/codesign-task.coffee b/build/tasks/codesign-task.coffee
index fd4592eba..544d331bd 100644
--- a/build/tasks/codesign-task.coffee
+++ b/build/tasks/codesign-task.coffee
@@ -3,6 +3,22 @@ module.exports = (grunt) ->
 
   grunt.registerTask 'codesign', 'Codesign the app', ->
     done = @async()
+
+    if process.env.XCODE_KEYCHAIN
+      unlockKeychain (error) ->
+        if error?
+          done(error)
+        else
+          signApp(done)
+    else
+      signApp(done)
+
+  unlockKeychain = (callback) ->
+    cmd = 'security'
+    args = ['-p', process.env.XCODE_KEYCHAIN_PASSWORD, process.env.XCODE_KEYCHAIN]
+    spawn {cmd, args}, (error) -> callback(error)
+
+  signApp = (callback) ->
     cmd = 'codesign'
     args = ['-f', '-v', '-s', 'Developer ID Application: GitHub', grunt.config.get('atom.shellAppDir')]
     spawn {cmd, args}, (error) -> done(error)