ci: fix unsigned macOS packaging

.github/workflows/macos-release.yml

@@ -16,8 +16,6 @@ jobs:
     env:
       HAS_APPLE_SIGNING: ${{ secrets.MAC_CERTIFICATE_P12 != '' }}
       HAS_APPLE_NOTARIZATION: ${{ secrets.APPLE_API_KEY_P8 != '' }}
-      CSC_LINK: ${{ secrets.MAC_CERTIFICATE_P12 }}
-      CSC_KEY_PASSWORD: ${{ secrets.MAC_CERTIFICATE_PASSWORD }}
       APPLE_API_KEY_ID: ${{ secrets.APPLE_API_KEY_ID }}
       APPLE_API_ISSUER: ${{ secrets.APPLE_API_ISSUER }}
 
@@ -53,11 +51,15 @@ jobs:
 
       - name: Build unsigned universal DMG and ZIP
         if: env.HAS_APPLE_SIGNING != 'true'
+        env:
+          CSC_IDENTITY_AUTO_DISCOVERY: 'false'
         run: npx electron-builder --mac dmg zip --universal --publish never
 
       - name: Build signed and notarized universal DMG and ZIP
         if: env.HAS_APPLE_SIGNING == 'true' && env.HAS_APPLE_NOTARIZATION == 'true'
         env:
+          CSC_LINK: ${{ secrets.MAC_CERTIFICATE_P12 }}
+          CSC_KEY_PASSWORD: ${{ secrets.MAC_CERTIFICATE_PASSWORD }}
           APPLE_API_KEY: ${{ runner.temp }}/AuthKey.p8
         run: npx electron-builder --mac dmg zip --universal --publish never -c.mac.notarize=true