added mechanisms for codesign when testing

.github/workflows/compile.yml

@@ -40,7 +40,7 @@ jobs:
         with:
           go-version: ${{ matrix.go }}
       - name: Unit Test
-        run: go test ./...
+        run: make test
       - name: Build
         run: cd example/linux && make
       - name: vet

Makefile

@@ -1,3 +1,7 @@
 .PHONY: fmt
 fmt:
-	@ls | grep -E '\.(h|m)$$' | xargs clang-format -i
+	@ls | grep -E '\.(h|m)$$' | xargs clang-format -i
+
+.PHONY: test
+test:
+	go test -exec "go run $(PWD)/cmd/codesign" -count=1 ./...

cmd/codesign/main.go

@@ -0,0 +1,62 @@
+package main
+
+import (
+	"fmt"
+	"log"
+	"os"
+	"os/exec"
+	"strings"
+)
+
+var entitlements = `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>com.apple.security.virtualization</key>
+	<true/>
+</dict>
+</plist>`
+
+func main() {
+	if err := run(); err != nil {
+		log.Fatal(err)
+	}
+}
+
+func run() error {
+	f, err := os.CreateTemp("", "*.entitlements")
+	if err != nil {
+		return fmt.Errorf("failed to create temp file: %w", err)
+	}
+	defer f.Close()
+	defer os.Remove(f.Name()) // clean up
+
+	if _, err := f.WriteString(entitlements); err != nil {
+		return fmt.Errorf("failed to write entitlements content: %w", err)
+	}
+
+	if err := f.Close(); err != nil {
+		return fmt.Errorf("failed to close temp file: %w", err)
+	}
+
+	cmd := exec.Command("codesign", "--entitlements", f.Name(), "-s", "-", os.Args[1])
+	cmd.Stderr = os.Stderr
+	if err := cmd.Run(); err != nil {
+		return fmt.Errorf("failed to do codesign(%q): %w",
+			strings.Join(
+				[]string{
+					"codesign", "--entitlements", f.Name(), "-s", "-", os.Args[1],
+				},
+				" ",
+			),
+			err,
+		)
+	}
+
+	testcmd := exec.Command(os.Args[1], os.Args[2:]...)
+	testcmd.Stdout = os.Stdout
+	testcmd.Stderr = os.Stderr
+	testcmd.Stdin = os.Stdin
+
+	return testcmd.Run()
+}