Merge pull request #745 from pulsar-edit/CI-sign-for-branch-pushes-Gi…

…tHub-Actions

CI: Sign macOS binaries for branch pushes, not PRs

.github/workflows/build.yml

@@ -80,9 +80,10 @@ jobs:
 
     # macOS Signing Stuff
     - name: Build Pulsar Binaries (macOS) (Signed)
-      if: ${{ runner.os == 'macOS' && github.event.pull_request.head.repo.full_name == 'pulsar-edit/pulsar' }}
-      # PRs generated from forks cannot access GitHub Secrets
-      # So if the PR is a fork, we will still build, but will not sign.
+      if: ${{ runner.os == 'macOS' && github.event_name == 'push' }}
+      # Note: PRs generated from forks cannot access GitHub Secrets.
+      # So if the PR is from a fork, we can still build, but cannot sign.
+      # Note: We aren't attempting to sign for *any* PRs anymore, though.
       env:
         CSC_LINK: ${{ secrets.CSC_LINK }}
         CSC_KEY_PASSWORD: ${{ secrets.CSC_KEY_PASSWORD }}
@@ -97,7 +98,7 @@ jobs:
         command: yarn dist
 
     - name: Build Pulsar Binaries (macOS) (Unsigned)
-      if: ${{ runner.os == 'macOS' && github.event.pull_request.head.repo.full_name != 'pulsar-edit/pulsar' }}
+      if: ${{ runner.os == 'macOS' && github.event_name != 'push' }}
       uses: nick-fields/retry@943e742917ac94714d2f408a0e8320f2d1fcafcd
       with:
         timeout_minutes: 30