Repository navigation
Tags
Tags
Sign and notarize macOS builds with Developer ID (#30) * Sign and notarize macOS builds with Developer ID Gatekeeper no longer blocks downloads: builds are signed with the Developer ID Application certificate under the hardened runtime and notarized by Apple at dist time. - hardenedRuntime with minimal JIT entitlements (Electron/V8) - identity auto-discovered from the keychain - notarize: true; credentials come from APPLE_API_* env vars at build time, nothing secret lives in the repo * README: drop the xattr quarantine step, builds are signed and notarized now * v0.1.3; verify notarization after every dist build npm runs postdist automatically after dist: stapler validate plus a Gatekeeper assess. If notarization was silently skipped (missing env credentials), the build now fails loudly instead of producing a shippable-looking unsigned DMG.