Fixed macos licensing

.github/workflows/macos-release-build.yml

@@ -135,6 +135,9 @@ jobs:
         env:
           SURFER_COMPAT: ${{ matrix.arch }}
           ZEN_GA_DISABLE_PGO: true
+          MACOS_APPLE_ACCOUNT_ID: ${{ secrets.macOS_AppleAccountId }}
+          MACOS_APPLE_DEVELOPER_ID_TEAM_ID: ${{ secrets.macOS_AppleDeveloperIdTeamId }}
+          MACOS_APPLE_DEVELOPER_ID_PASSWORD: ${{ secrets.macOS_AppleDeveloperIdPassword }}
         run: |
           export SURFER_PLATFORM="darwin"
           export MACOS_APPLE_DEVELOPER_ID="${{ secrets.macOS_AppleDeveloperId }}"

build/codesign/codesign.bash

@@ -155,6 +155,14 @@ codesign --force -o runtime --verbose --sign "$IDENTITY" --deep \
 codesign -vvv --deep --strict "${BUNDLE}"
 
 # Staple the ticket
+xcrun notarytool submit "${BUNDLE}" \
+  --apple-id "${MACOS_APPLE_ACCOUNT_ID}" \
+  --team-id "${MACOS_APPLE_DEVELOPER_ID_TEAM_ID}" \
+  --password "${MACOS_APPLE_DEVELOPER_ID_PASSWORD}" \
+  --no-s3-acceleration \
+  --verbose \
+  --wait
+
 xcrun stapler staple --verbose "${BUNDLE}" || exit 0
 
 # Create a DMG