OSX notarize Unity+Oculus app

notarize.sh

#!/bin/bash

## we assume both the app and the entitlements file are in ./

APP="something.app"
ENT="something.entitlements"
ZIP="somthing.zip"
BUNDLE="com.something"
APPLE_ID="someone@somewhere.com"
PW="aaaa-bbbb-cccc-dddd"
DEV_ID="Developer ID Application: Somebody (XXXXXXXXX)"
PROVIDER_SHORT="XXXXXXXX"

chmod -R a+xr "$APP"
find ./$APP -type f -exec codesign --timestamp --keychain ~/Library/Keychains/login.keychain-db -s "$DEV_ID" -f --verbose=9 --deep --options=runtime --entitlements "$ENT" {​​​​​​​}​​​​​​​ +
codesign --deep --force --verify --verbose --timestamp --options runtime --entitlements "$ENT" --sign "$DEV_ID" "$APP/Contents/Plugins/ovrplatform.bundle/Contents/MacOS/ovrplatform"
codesign --deep --force --verify --verbose --timestamp --options runtime --entitlements "$ENT" --sign "$DEV_ID" "$APP"
ditto -c -k --sequesterRsrc --keepParent "$APP" "$ZIP"
xcrun altool --notarize-app --username "$APPLE_ID" --password $PW --asc-provider "$PROVIDER_SHORT" --primary-bundle-id $BUNDLE --file "$ZIP"