macOS Notarization

Use this skill when you need to notarize a macOS app for distribution outside the App Store.

Preconditions

• Xcode installed and command line tools configured.
• Auth is configured (asc auth login or ASC_* env vars).
• A Developer ID Application certificate in the local keychain.
• The app's Xcode project builds for macOS.

Preflight: Verify Signing Identity

Before archiving, confirm a valid Developer ID Application identity exists:

security find-identity -v -p codesigning | grep "Developer ID Application"

If no identity is found, create one at https://developer.apple.com/account/resources/certificates/add (the App Store Connect API does not support creating Developer ID certificates).