Anonymous - 2 days ago

Originally posted by: A-Hackers-Guide

Shipped unsigned in v0.2.0: sys1_0.2.0_macos_universal.pkg (Apple Silicon + Intel, graphical Installer with welcome, license and next-steps pages). CI installs it with installer -pkg and runs both apps. Until it's signed, macOS will block a double-click: right-click → Open the first time.

Still needed to finish: an Apple Developer ID (Installer) certificate and notarization credentials as repository secrets. Then add productsign + xcrun notarytool submit --wait + stapler staple to the macos-pkg job in .github/workflows/packages.yml.