[Feature]: Code Sign and Notarize macOS app

[mtdvlpr]

Is your feature request related to a problem?

Currently macOS users have to execute 2 Terminal commands in order to install and use M³. That is rather difficult for regular users.

Progress

• Set the following environment secrets in the repo:
  • MAC_CERTIFICATE_BASE64 (as shared)
  • MAC_CERTIFICATE_PASSWORD (as shared)
  • KEYCHAIN_PASSWORD (random string)
  • APPLE_ID (as shared)
  • APPLE_TEAM_ID (as shared)
  • APPLE_APP_SPECIFIC_PASSWORD (as shared)
• Create workflow to automatically sign and notarize app
• Test a fresh install
• Test an update from unsigned to signed
• Test an update from signed to signed

Resources

• https://www.electronforge.io/guides/code-signing/code-signing-macos#obtaining-signing-certificates
• https://medium.com/@sdqumar09/electron-macos-code-signing-github-actions-and-locally-e7f0c62211d6
• https://dev.to/rwwagner90/signing-electron-apps-with-github-actions-4cof
• https://github.com/electron/notarize?tab=readme-ov-file#usage-with-app-specific-password

[mtdvlpr]

@sircharlo, could you configure the environment secrets?

[sircharlo]

Done!

[sircharlo]

I think you just fixed it ;)