Credentials

1. Need a Developer ID Application certificate for signing applications. Can see valid certificates with security find-identity -p basic -v

2. Notarytool needs a password that is stored in the keychain, is stored using the following command: xcrun notarytool store-credentials "notarytool-password" --apple-id "ibi.keller@gmail.com" --team-id 5QKL3V72F3 --password <from_appleid.apple.com_stored_in_bitwarden!!>

Entitlements

• Individual files and the entire .app can get different entitlements... see https://docs.avaloniaui.net/docs/deployment/macOS

Notarizing

• It is preferred to notarize a .pkg or .dmg, not a .zip. Zip & 7z don't keep UTF8 filename encodings when zipping, which breaks notarizing.