Proper notarization of macOS apps since Xcode 13+

notarize.sh

#!/bin/sh
# this script must be ran in the same directory as the .app file!
# change this
APP_NAME="Sonic Time Twisted.app"
# must be a 'Developer ID: ' cert, not Mac Distribution etc...
CERT_NAME="Developer ID: kekeke@lololo.com (AAAABBBB)"
MAC_USER_PASS="1234"
PRODUCT_NAME="myproduct"
# this is the name of a notarytool profile, you have to make it ONCE with this command:
# xcrun notarytool store-credentials "Profile_Name" --apple-id "your apple id email here" --team-id YourTeamIDHere --password PasswordOrAppPassword
NOTARY_PROFILE="Profile_Name"
# the fun
rm -rf _export
mkdir _export
mkdir "_export/$PRODUCT_NAME"
security unlock-keychain -p "$MAC_USER_PASS"
# almost like a poem
codesign --verbose --deep --strict --timestamp --force --options=runtime --sign "$CERT_NAME" "$APP_NAME"
mv "$APP_NAME" "_export/$PRODUCT_NAME"
cd _export
hdiutil create -srcfolder "$PRODUCT_NAME" -format UDBZ notaryfiles.dmg
xcrun notarytool submit -p "$NOTARY_PROFILE" --verbose notaryfiles.dmg --wait --timeout 2h
cd "$PRODUCT_NAME"
xcrun stapler staple "$APP_NAME"
cd ..
rm notaryfiles.dmg
hdiutil create -srcfolder "$PRODUCT_NAME" -format UDBZ FINAL.dmg
echo "please see FINAL.dmg, thank you."