Skip to main content

Posts

Showing posts with the label CI/CD

Fixing 'Unidentified Developer': Automating Electron macOS Notarization

  The most frustrating bug report an Electron maintainer can receive isn't a runtime error or a layout gltich—it's the report that the application simply won't open. The dreaded "Unidentified Developer" modal is a hard stop for user acquisition. While code signing proves  who  you are, it no longer proves  what  your code is. Since macOS 10.15 (Catalina), Apple enforces  Notarization  for all software distributed outside the Mac App Store. If you aren't stapling a notarization ticket to your DMG or ZIP, your app is effectively dead on arrival. Automating this in a headless CI/CD environment (GitHub Actions, GitLab CI, CircleCI) is notoriously brittle due to Apple ID 2FA requirements. This guide implements a robust, stateless solution using App Store Connect API Keys and  notarytool , bypassing legacy app-specific passwords entirely. The Root Cause: Gatekeeper & Notarytool Under the hood, macOS Gatekeeper performs a quarantine check on download...