Hey
I remember watching all these notarise videos 1-2 years ago.
Ok so let me just... "bullet point it..."
Compile app
I get either .app or .plugin
Enter the package, go over every file and sign it "--verbose=3", "--force", "--timestamp", "--options", "runtime", "--sign", identity, path # use my developer ID, sign MacOS content last!!
Zip the .app/.plugin as xx_NOTATORY.zip (_NOTATORY not needed) ditto -c", "-k", "--keepParent", appPath, zipPath
Send it to apple "notarytool", "submit", zipPath, "--keychain-profile", "myFancyKeychainProfileIveNoIdeaHowIMadeItItWasYearsAgo", "--wait"
Staple it xscrun "stapler", "staple", appPath - staple the .app/.plugin not zipped Notatory zip ?
Zip it again ditto -c", "-k", "--keepParent", appPath, zipReleasePath
Send zipped file to clients ?
I don't need to sign it again using Distribution/etc certificate after part 6?
Regards
Dariusz