notarize

Author: ethanndickson

scripts/build.sh

@@ -15,6 +15,7 @@ mkdir -p "$ALT_PROVISIONING_PROFILES_DIR"
 APPLE_TEAM_ID="4399GN35BJ"
 CODE_SIGN_IDENTITY="Developer ID Application: Coder Technologies Inc (${APPLE_TEAM_ID})"
 
+# Extract the ID of each provisioning profile
 APP_PROVISIONING_PROFILE_ID=$(get_uuid "$APP_PROF_PATH")
 EXT_PROVISIONING_PROFILE_ID=$(get_uuid "$EXT_PROF_PATH")
 PTP_SUFFIX="-systemextension"
@@ -55,16 +56,22 @@ create-dmg \
     "$built_app_path" \
     ./
 
+# Add dmg to build artifacts
 dmg_path="./build/Coder Desktop.dmg"
 mv ./Coder\ Desktop*.dmg "$dmg_path"
 
+# Notarize
 xcrun notarytool store-credentials "notarytool-credentials" \
     --apple-id "$APPLE_ID" \
     --team-id "$APPLE_TEAM_ID" \
     --password "$APPLE_ID_PASSWORD" \
     --keychain "$KEYCHAIN_PATH"
 
-# xcrun notarytool submit "$dmg_path" --keychain-profile "notarytool-credentials" --wait
+xcrun notarytool submit "$dmg_path" \
+    --keychain-profile "notarytool-credentials" \
+    --keychain "$KEYCHAIN_PATH" \
+    --wait
 
-# xcrun stapler staple "$dmg_path"
-# xcrun stapler staple "$app_path"
+# Staple the notarization to the app and dmg, so they work without internet
+xcrun stapler staple "$dmg_path"
+xcrun stapler staple "$app_path"