outthislife Notarize macOS Build
Use the project's existing notarization automation. Don't invent a new signing pipeline or expose credentials.
Procedure
- Confirm the checkout and branch. Default to a clean, current default branch.
- Locate the existing notarization/release script (e.g. a
notarize-*-installer.shor the release script the project already ships):- use a path the user supplies first;
- otherwise search the repo and nearby release/notary checkouts;
- if none exists, ask for its location instead of recreating it.
- Run the script from the environment it expects.
- Preserve its signing identity, App Store Connect key handling, artifact naming, and notarization flow.
- Verify the resulting artifact with the script's checks or
spctl. - Report the artifact path, size, notarization result, and Gatekeeper result.
Never print private key contents, signing credentials, or secret values.