I should add the specific error that the notary service is complaining about:
$ xcrun notarytool log eaa1e96e-38d0-4d6d-ad0f-bc58564b7eca --apple-id ##redacted# --team-id HRLUCP7QP4
Password for ##redacted##:
{
"logFormatVersion": 1,
"jobId": "eaa1e96e-38d0-4d6d-ad0f-bc58564b7eca",
"status": "Invalid",
"statusSummary": "Archive contains critical validation errors",
"statusCode": 4000,
"archiveFilename": "Pacifist.zip",
"uploadDate": "2021-12-11T17:52:07.189Z",
"sha256": "c589ce3b11429ebfc3f343c77053df3416438c11bad690f0ca1307aee585529e",
"ticketContents": null,
"issues": [
{
"severity": "error",
"code": null,
"path": "Pacifist.zip/Pacifist.app/Contents/MacOS/Pacifist",
"message": "The signature of the binary is invalid.",
"docUrl": null,
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path": "Pacifist.zip/Pacifist.app/Contents/MacOS/Pacifist",
"message": "The signature of the binary is invalid.",
"docUrl": null,
"architecture": "arm64"
},
{
"severity": "error",
"code": null,
"path": "Pacifist.zip/Pacifist.app/Contents/XPCServices/PacifistXPCService.xpc/Contents/MacOS/PacifistXPCService",
"message": "The signature of the binary is invalid.",
"docUrl": null,
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path": "Pacifist.zip/Pacifist.app/Contents/XPCServices/PacifistXPCService.xpc/Contents/MacOS/PacifistXPCService",
"message": "The signature of the binary is invalid.",
"docUrl": null,
"architecture": "arm64"
},
( ... repeat for every other binary in the app ... )
However, as we've seen above, both codesign -vv and spctl seem to think the signature is fine 🤷♂️