Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Notarization through the Notary API #593

Closed
wants to merge 2 commits into from

Commits on Aug 5, 2022

  1. Update pgp to 0.8

    roblabla committed Aug 5, 2022
    Configuration menu
    Copy the full SHA
    0a3e218 View commit details
    Browse the repository at this point in the history
  2. Use new REST API for notarization

    This replaces the notarization codepath to use the new REST API made
    available by Apple in WWDC22. This API is entirely documented, and meant
    for direct user consumption[0].
    
    As a result, this commit also removes the codepath using the Transporter
    API for notarization, and thus the requirement for the iTMSTransporter
    tool to be present on the machine for notarization.
    
    Note that the API has some undocumented bits that were discovered
    through trial and error. One such bit is that the S3 token that apple
    returns to upload files are valid for the us-west-2 region.
    
    [0]: https://developer.apple.com/documentation/notaryapi/submitting_software_for_notarization_over_the_web
    roblabla committed Aug 5, 2022
    Configuration menu
    Copy the full SHA
    51d557b View commit details
    Browse the repository at this point in the history