From 8d7f88ff2db53a41f43556982bdc3d8ba79bfe48 Mon Sep 17 00:00:00 2001
From: dreamer <dreamer@puikheid.nl>
Date: Tue, 28 Oct 2025 12:09:37 +0100
Subject: [PATCH] optional notarization step

---
 utils/package-osx-bundles.sh | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/utils/package-osx-bundles.sh b/utils/package-osx-bundles.sh
index 8406a19e..16400cd6 100755
--- a/utils/package-osx-bundles.sh
+++ b/utils/package-osx-bundles.sh
@@ -158,5 +158,12 @@ productbuild \
   "${PKG_SIGN_ARGS[@]}" \
   ${MACOS_PKG_SNAME}-macOS.pkg
 
-# xcrun notarytool submit build/*-macOS.pkg --keychain-profile "build-notary" --wait
-# xcrun notarytool log --keychain-profile "build-notary" 00000000-0000-0000-0000-000000000000
+if [ -n "${MACOS_NOTARIZATION_USER}" ] && [ -n "${MACOS_NOTARIZATION_PASS}" ] && [ -n "${MACOS_NOTARIZATION_TEAM}" ]; then
+  xcrun notarytool submit ${MACOS_PKG_NAME}-macOS.pkg \
+    --apple-id ${MACOS_NOTARIZATION_USER} \
+    --password ${MACOS_NOTARIZATION_PASS} \
+    --team-id ${MACOS_NOTARIZATION_TEAM} \
+    --wait
+
+  xcrun stapler staple ${MACOS_PKG_NAME}-macOS.pkg
+fi