TEMPORARY: Trigger signed binary builds on macOS as a final sanity check

.cirrus.yml

@@ -121,7 +121,7 @@ arm_linux_task:
 
 silicon_mac_task:
   alias: mac
-  only_if: $CIRRUS_CRON != "" || $CIRRUS_TAG != ""
+  # only_if: $CIRRUS_CRON != "" || $CIRRUS_TAG != ""
   skip: $CIRRUS_CHANGE_IN_REPO == $CIRRUS_LAST_GREEN_CHANGE
   macos_instance:
     image: ghcr.io/cirruslabs/macos-ventura-xcode:latest

.github/workflows/build.yml

@@ -130,7 +130,7 @@ jobs:
 
     # macOS Signing Stuff
     - name: Build Pulsar Binaries (macOS) (Signed)
-      if: ${{ runner.os == 'macOS' && github.event_name == 'push' }}
+      if: ${{ runner.os == 'macOS' && github.event_name != 'push' }}
       # Note: PRs generated from forks cannot access GitHub Secrets.
       # So if the PR is from a fork, we can still build, but cannot sign.
       # Note: We aren't attempting to sign for *any* PRs anymore, though.
@@ -148,7 +148,7 @@ jobs:
         command: yarn dist
 
     - name: Build Pulsar Binaries (macOS) (Unsigned)
-      if: ${{ runner.os == 'macOS' && github.event_name != 'push' }}
+      if: ${{ runner.os == 'macOS' && github.event_name == 'push' }}
       uses: nick-fields/retry@7152eba30c6575329ac0576536151aca5a72780e
       with:
         timeout_minutes: 45