CLI reference / product / signing / notarize

stado product signing notarize

Invocation

stado product signing notarize [OPTIONS] --app <app>

Purpose

Notarize a signed .app with Apple's notary (AC_API_KEY_ID, AC_API_ISSUER_ID, AC_API_KEY_P8), staple it and check Gatekeeper; the notary's answer goes to --evidence, default $WISENT_OUTPUT_DIR/notary.json

Required inputs and options

Input or optionContract
--app <app>Signed .app bundle to notarize
--catalog <catalog>Independent authoritative catalog path
--evidence <evidence>Where the notary's JSON answer is written
--workspace <workspace>The workspace of canonical checkouts this operation reads and builds from; default WISENT_WORKSPACE, else ~/Documents/CodingProjects/Wisent
--jsonPrint the notarization result

Output and state effect

It performs the operation described above and emits its operator result on standard output or standard error. Any state change is limited to the resources and records named by the purpose and options on this page.

Refusals

  • Before dispatch, Stado refuses a missing required token shown in the invocation, an unknown option, or a value outside a listed value set; argument-usage failures exit with code 2.