chore: notarize macOS bundle only with --notarize argument, include team id

ansgarbecker · ansgarbecker · commit 887a6cf48335 · 2025-12-21T15:23:02.000+01:00
diff --git a/create-macos-app.sh b/create-macos-app.sh
@@ -1,6 +1,15 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
+DO_NOTARIZE=false
+# parse args
+for arg in "$@"; do
+  case "$arg" in
+    --notarize) DO_NOTARIZE=true ;;
+  esac
+done
+
+
 ### CONFIGURATION
 
 APP_NAME="heidisql"
@@ -15,11 +24,8 @@ EXECUTABLE_TRG="${APP_DIR}/Contents/MacOS/${APP_NAME}"
 BREW_PREFIX="$(brew --prefix 2>/dev/null || echo "/opt/homebrew")"
 
 # Your Developer ID identity, as shown by: security find-identity -v -p codesigning
-CODESIGN_IDENTITY="Developer ID Application: Ansgar Becker (???)"
-
-# Your Apple ID email and team ID
-APPLE_ID_EMAIL="apple@???"
-TEAM_ID="???"
+TEAM_ID="QBD4CC6FH3"
+CODESIGN_IDENTITY="Developer ID Application: Ansgar Becker (${TEAM_ID})"
 
 # Name for notarytool keychain profile (store once with notarytool store-credentials)
 NOTARY_PROFILE="notarytool-profile"
@@ -298,6 +304,11 @@ codesign --verify --deep --strict --verbose=2 "${APP_DIR}"
 
 ### ZIP, NOTARIZE, AND STAPLE
 
+if ! $DO_NOTARIZE; then
+  echo "Skip notarization (--notarize not given)"
+  exit 0
+fi
+
 ZIP_PATH="${APP_DIR}.zip"
 rm -f "${ZIP_PATH}"
 echo "Zipping app for notarization..."
