Mac app is not trusted

[janhoy]

The mac .dmg package can easily be installed by dropping the app into /Applications, but then most users won't be able to run it due to lack of trusted signature. Is there a way for the GitHub action to pick up some credential for a Mac developer during build?

[MuhammedKalkan]

It seems it is possible to produce a signed package, however someone needs to arrange certificates with developer account. Example : https://localazy.com/blog/how-to-automatically-sign-macos-apps-using-github-actions

[janhoy]

Do you have a Mac? If not, I could probably help with the cert.

[MuhammedKalkan]

Problem seems to be the developer account. i dont have one. İf you have one , i think it is more convenient to create a dev installer certificate for .dmg ones. Not really experienced with mac cert processes.

[janhoy]

I have an Apple dev account, currently investigating the steps involved. If you are willing to grant me maintainer access to this repo, I can try to add my certificate as a github secret and test the flow in a new branch.

[MuhammedKalkan]

Sure, check inv

[Punkoivan]

That would be awesome. Thanks for your initiative folks.

[jkroepke]

@MuhammedKalkan I can also provide a signature through @xavierLowmiller apple developer Account. Good point to move forward here since its blocking the M1 builds here.

[MuhammedKalkan]

@MuhammedKalkan I can also provide a signature through @xavierLowmiller apple developer Account. Good point to move forward here since its blocking the M1 builds here.

That would be the fastest solution right now.On top of signing also notarization needs to take place. @janhoy tried the same approach but could not see it through i guess. if you can make a PR after signing and confirming, we can merge back here

[jkroepke]

@MuhammedKalkan PR opened. binaries can be tested.