Apple signing missing in new GitHub release workflow

[moneymanolis]

One workaround for now is to download the dmg-file and then run in the terminal

cd /Applications 
xattr -cr "Specter.app"

[al-munazzim]

Triage Assessment

This is a valid issue — the new GitHub Actions release workflow (PRs #2524, #2526, #2527) produces unsigned macOS binaries.

The workflow currently uses create-dmg but doesn't include Apple code signing because it requires:

1. Apple Developer account credentials
2. Developer ID Application certificate
3. Notarization with Apple's notary service

Workaround (as you noted): xattr -cr /Applications/Specter.app

To fix properly, the workflow needs:

• Secrets: APPLE_DEVELOPER_CERTIFICATE_P12_BASE64, APPLE_DEVELOPER_CERTIFICATE_PASSWORD, APPLE_ID, APPLE_ID_PASSWORD, APPLE_TEAM_ID
• Steps: Import certificate → sign with codesign → notarize with xcrun notarytool → staple ticket

Happy to implement this if a maintainer can provide/configure the Apple Developer secrets.