feat(bundle): add --no-sign flag to skip code signing in bundling pro… #14052

ShigrafS · 2025-08-21T09:59:00Z

Description

This PR addresses an issue where building a Tauri application locally fails if code signing environment variables are not configured. It adds a new --no-sign CLI flag to the tauri build command, allowing developers and contributors to easily create unsigned application bundles for testing and development purposes.

Summary

This PR adds the --no-sign flag to the tauri build command, streamlining the development workflow by allowing unsigned bundles to be built without the need for code signing keys. This is particularly useful for local testing, where the full build and install process can be checked without the overhead of configuring signing certificates.

🧩 Related Issue

Closes #11626
[feat] build without signing cli flag

✨ What's New

New CLI Flag: Adds the --no-sign option to tauri build and tauri bundle.
Bundler Logic: Updates the tauri-bundler to check for this flag and skip the code signing step for both macOS and Windows.
Codebase Integration: A new no_sign field is added to the bundler's Settings struct to pass this flag's state through the build pipeline.

💡 Why This Matters

Improved Developer Experience: Simplifies the build process for contributors and new developers who don't have access to signing keys.
Faster Iteration: Allows for rapid testing of the installer, uninstaller, and updater functionality without the time-consuming signing process.
Flexibility: Provides a native CLI solution, eliminating the need for workarounds like using separate configuration files for local builds.

How has this PR been tested?

Local Builds: Tested with and without the --no-sign flag on both macOS and Windows to ensure that the signing process is correctly skipped.
Logic Verification: Confirmed that the no_sign flag is properly handled within tauri-bundler, preventing the call to the signing functions.

Is this a breaking change?

No. This change adds a new, optional flag and does not modify any existing functionality.

Does this PR require an update to the documentation?

Yes. The tauri build and tauri bundle CLI references should be updated to include the new --no-sign flag and its purpose.

Checklist:

The code has been tested locally
Tests have been added to cover all new functionality
The documentation has been updated to reflect any changes

ShigrafS · 2025-08-22T12:43:41Z

Hi @Legend-Master
This PR ready.
Kindly review it.

Legend-Master · 2025-08-22T12:57:58Z

Thanks for the PR, but before a proper review, first I'll need ask you to cleanup the unrelated changes and things like // <-- ADDED THIS LINE TO FIX THE COMPILER ERROR 😂

ShigrafS · 2025-08-22T17:44:54Z

Sure!
I'll make changes, verify build and ping you.

ShigrafS · 2025-08-23T08:21:09Z

@Legend-Master
Build successfully: Finished dev profile [unoptimized + debuginfo] target(s) in 28m 13s

The other changes are due to linter.
Please let me know how should I proceed with it.
Thanks!

Legend-Master · 2025-08-23T08:23:41Z

The other changes are due to linter.
Please let me know how should I proceed with it.

You'll need to revert them as well

…cess - Introduce a o_sign option in bundle settings to allow skipping code signing - Update macOS and Windows bundler implementations to respect the flag - Wire up CLI option --no-sign to control signing behavior during bundling - Add necessary config and type changes to propagate the flag throughout bundler Signed-off-by: ShigrafS <shigrafsalik@proton.me>

Signed-off-by: ShigrafS <shigrafsalik@proton.me>

ShigrafS · 2025-08-23T10:43:49Z

Thank you for your guidance @Legend-Master
I've made the necessary changes.

github-actions · 2025-08-23T11:33:19Z

Package Changes Through `332f55f`

There are 2 changes which include tauri-cli with minor, tauri-bundler with minor

Planned Package Versions

The following package releases are the planned based on the context of changes in this pull request.

package	current	next
tauri-bundler	2.6.0	2.7.0
@tauri-apps/cli	2.8.1	2.8.2
tauri-cli	2.8.0	2.9.0

Add another change file through the GitHub UI by following this link.

Read about change files or the docs at github.com/jbolda/covector

Signed-off-by: ShigrafS <shigrafsalik@proton.me>

Legend-Master

We'll also a change file

https://github.com/tauri-apps/tauri/blob/dev/.changes/README.md

@FabianLars Since I'm not familiar with signing on macOS (I think it would fail if you have signingIdentity set but not the signing env vars), do you think we should also add this for macOS? I know we don't force the signing on Linux and the mobile signing process is not covered by tauri cli so probably don't need it for those platforms

crates/tauri-cli/src/bundle.rs

Legend-Master · 2025-08-23T13:34:38Z

crates/tauri-bundler/src/bundle/settings.rs

  target_platform: TargetPlatform,
  /// The target triple.
  target: String,
+  pub no_sign: bool,


Suggested change

pub no_sign: bool,

no_sign: bool,

Reverting this back to public, since making this private is breaking the code.

This should be put into a getter below instead of being pub here

Signed-off-by: ShigrafS <shigrafsalik@proton.me>

o_sign flag in build options Signed-off-by: ShigrafS <shigrafsalik@proton.me>

Signed-off-by: ShigrafS <shigrafsalik@proton.me>

o_sign private and add getter Signed-off-by: ShigrafS <shigrafsalik@proton.me>

Signed-off-by: ShigrafS <shigrafsalik@proton.me>

ShigrafS · 2025-08-26T18:38:26Z

@Legend-Master @lucasfernog
Should I rebase the branch?

FabianLars · 2025-08-26T18:40:41Z

nah you're good, github shows no merge conflicts yet. we're just waiting for 2.9 to get a bit closer before we merge it.

github-project-automation bot added this to Roadmap Aug 21, 2025

github-project-automation bot moved this to 📬Proposal in Roadmap Aug 21, 2025

ShigrafS marked this pull request as ready for review August 21, 2025 14:06

ShigrafS requested a review from a team as a code owner August 21, 2025 14:06

ShigrafS force-pushed the cli branch from 96e86ea to 3226b62 Compare August 22, 2025 12:42

ShigrafS force-pushed the cli branch 3 times, most recently from 57751ef to 10297b9 Compare August 23, 2025 07:15

ShigrafS force-pushed the cli branch 4 times, most recently from 177d464 to a5febe6 Compare August 23, 2025 10:06

ShigrafS added 9 commits August 23, 2025 16:13

ci: added yml for github action testing

c1fc42a

Signed-off-by: ShigrafS <shigrafsalik@proton.me>

fix: fixed field 'digest_algorithm' is already declared error

8c3de50

Signed-off-by: ShigrafS <shigrafsalik@proton.me>

ci: updated to test the new features as well

9428c79

Signed-off-by: ShigrafS <shigrafsalik@proton.me>

ci: fixed yml issue

1530d91

Signed-off-by: ShigrafS <shigrafsalik@proton.me>

fix: fixed missing parameter issue in android sign.rs

c2f28e9

Signed-off-by: ShigrafS <shigrafsalik@proton.me>

chore: apply linting

a7db28c

Signed-off-by: ShigrafS <shigrafsalik@proton.me>

chore: remove redundant files

f2ce25c

Signed-off-by: ShigrafS <shigrafsalik@proton.me>

chore: revert indentations

8c49385

Signed-off-by: ShigrafS <shigrafsalik@proton.me>

ShigrafS force-pushed the cli branch from a5febe6 to 8c49385 Compare August 23, 2025 10:43

fix: added parameters to ios mobile build.rs

db2027d

Signed-off-by: ShigrafS <shigrafsalik@proton.me>

Legend-Master reviewed Aug 23, 2025

View reviewed changes

docs: updated documentation for settigs.rs

648cde9

Signed-off-by: ShigrafS <shigrafsalik@proton.me>

ShigrafS force-pushed the cli branch from 8b593f4 to 648cde9 Compare August 23, 2025 15:19

ShigrafS added 4 commits August 23, 2025 20:55

docs(cli): add documentation for

cd5466a

o_sign flag in build options Signed-off-by: ShigrafS <shigrafsalik@proton.me>

chore: apply cargo fmt

78e4985

Signed-off-by: ShigrafS <shigrafsalik@proton.me>

docs: added CHANGES.md

a16cfef

Signed-off-by: ShigrafS <shigrafsalik@proton.me>

refactor(bundler): make

4f02ab3

o_sign private and add getter Signed-off-by: ShigrafS <shigrafsalik@proton.me>

ShigrafS requested a review from Legend-Master August 24, 2025 07:59

fix: minor error

aeacf23

Signed-off-by: ShigrafS <shigrafsalik@proton.me>

ShigrafS force-pushed the cli branch from 69122ed to 274da23 Compare August 24, 2025 09:25

refactor: revert build_benchmark_jsons.rs

9f30c16

Signed-off-by: ShigrafS <shigrafsalik@proton.me>

ShigrafS force-pushed the cli branch from 274da23 to 9f30c16 Compare August 24, 2025 09:26

lucasfernog added 4 commits August 24, 2025 07:15

Merge branch 'dev' into cli

676ee5d

impl for macos too

9fddbc4

fix ci

bf64dcd

fix windows build

332f55f

lucasfernog approved these changes Aug 24, 2025

View reviewed changes

Legend-Master added this to the 2.9 milestone Aug 25, 2025

Legend-Master mentioned this pull request Aug 31, 2025

[feat] build without signing cli flag #11626

Closed

lucasfernog merged commit 2a06d10 into tauri-apps:dev Sep 1, 2025
17 checks passed

github-project-automation bot moved this from 📬Proposal to 🔎 In audit in Roadmap Sep 1, 2025

github-actions bot mentioned this pull request Sep 1, 2025

Apply Version Updates From Current Changes #14137

Merged

Uh oh!

feat(bundle): add --no-sign flag to skip code signing in bundling pro… #14052

feat(bundle): add --no-sign flag to skip code signing in bundling pro… #14052

Uh oh!

Conversation

ShigrafS commented Aug 21, 2025

Description

Summary

🧩 Related Issue

✨ What's New

💡 Why This Matters

How has this PR been tested?

Is this a breaking change?

Does this PR require an update to the documentation?

Checklist:

Uh oh!

ShigrafS commented Aug 22, 2025

Uh oh!

Legend-Master commented Aug 22, 2025

Uh oh!

ShigrafS commented Aug 22, 2025

Uh oh!

ShigrafS commented Aug 23, 2025

Uh oh!

Legend-Master commented Aug 23, 2025

Uh oh!

ShigrafS commented Aug 23, 2025

Uh oh!

github-actions bot commented Aug 23, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Package Changes Through 332f55f

Uh oh!

Legend-Master left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Legend-Master Aug 23, 2025

Choose a reason for hiding this comment

Uh oh!

ShigrafS Aug 23, 2025

Choose a reason for hiding this comment

Uh oh!

Legend-Master Aug 24, 2025

Choose a reason for hiding this comment

Uh oh!

ShigrafS commented Aug 26, 2025

Uh oh!

FabianLars commented Aug 26, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

github-actions bot commented Aug 23, 2025 •

edited

Loading

Package Changes Through `332f55f`