log deploy/osx/sign.sh @ 2401:b6d0823e41a5

age author description
Thu, 17 Oct 2019 15:33:05 +0100 Chris Cannam Attempt to request to load unsigned plugins. Not helping with the plugins that are currently failing.
Wed, 16 Oct 2019 13:50:06 +0100 Chris Cannam Rework deployment scripts with a separate package/notarize step
Thu, 25 Apr 2019 16:46:02 +0100 Chris Cannam Work on sandboxing (possibly) and using the hardened runtime for notarization. Supply appropriate bundle ID for helpers as well as main application, and request inherited sandbox entitlements. Currently works with sandboxing (apparently) but not yet with the hardened runtime, where we can't load plugins signed by third parties even with the com.apple.security.cs.disable-library-validation entitlement because their team IDs don't match the host. Possibly that exception is supposed to be requested some other way? sandbox-notarize