On our builds, yes of course. But we should not force someone who downloads the source and builds for themselves to also sign that.
Traditionally, we've always signed after we build as a separate process from building the community build DMGs. Hopefully that's a bit more clear :) > On Sep 10, 2026, at 5:59 AM, Peter Kovacs <[email protected]> wrote: > > > > Am 10. September 2026 11:47:21 MESZ schrieb Jim Jagielski <[email protected]>: >> I can't imagine the regular user wanting/needing to sign... > Sorry maybe I was not clear. > I think we should enforce signing on all builds. > The user can always see if that build is from us or someone else. Development > builds will always trigger the gatekeeper. >> >>> On Sep 10, 2026, at 5:38 AM, Peter Kovacs <[email protected]> wrote: >>> >>> >>> >>> Am 10. September 2026 11:30:18 MESZ schrieb Jim Jagielski <[email protected] >>> <mailto:[email protected]>>: >>>> I am also wondering if the actual signing script itself should be in >>>> devtools, somewhere under release-scripts instead. >>> >>> The process ist to sign the app, then package the image, and then you need >>> to sign again. >>> >>> I would rather enforce signing to be mandatory. >>> What we could put into Devtools maybe is the notarize of the installer. >>> Which publishes the release at Apple. I guess. And then we could think >>> about a process to publish in the store. >>>> >>>> Cool work. >>> Yes. I hope this will >>>> >>>>> On Sep 10, 2026, at 5:14 AM, Jim Jagielski <[email protected]> wrote: >>>>> >>>>> Is there any way you could pull out just the signing bits into a separate >>>>> commit? >>>>> >>>>>> On Sep 10, 2026, at 12:26 AM, [email protected] wrote: >>>>>> >>>>>> >>>> >>>> -- >>>> Jim >>>> "This is an outrage!" >>>> Tony Harrison >>>> >>> >>> --------------------------------------------------------------------- >>> To unsubscribe, e-mail: [email protected] >>> <mailto:[email protected]> >>> For additional commands, e-mail: [email protected] >>> <mailto:[email protected]> >> -- >> Jim >> "This is an outrage!" >> Tony Harrison >> > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > -- Jim "This is an outrage!" Tony Harrison
