macos-notarization

Automate macOS notarization and DMG release workflows with notarytool and stapler.

6|Updated Apr 23, 2026
One-click install
npx skills add https://github.com/ImL1s/flutter-claude-skills --skill macos-notarization
Or copy as Structured Prompt for Agentβ–Ό
Please help me install this Agent Skill.
Skill: macos-notarization
Source: https://github.com/ImL1s/flutter-claude-skills/tree/main/skills/macos-notarization
Command: npx skills add https://github.com/ImL1s/flutter-claude-skills --skill macos-notarization

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

macOS notarization and DMG distribution can be complex and error-prone, requiring proper credential handling, signing, and verification to meet Gatekeeper requirements.

Core Features & Use Cases

  • End-to-end macOS notarization workflow, including DMG creation, submission, stapling, and verification.
  • Guidance for managing ASC API keys, codesigning, and provisioning steps, and ensuring hardened runtime settings.
  • Real-world use cases: preparing a macOS app for distribution with compliant notarization.

Quick Start

Prepare your ASC API key and signing credentials, then generate a release build, notarize the DMG, staple the ticket, and verify the result.

Frequently Asked Questions about macos-notarization

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate macOS notarization and DMG creation in a CI pipeline?β–Ό

Automate macOS notarization and DMG creation by using notarytool to submit builds, stapler to attach tickets, and xcrun to validate hardened runtime settings across CI or local environments.

What is needed to notarize a DMG and pass macOS Gatekeeper verification?β–Ό

Notarizing a DMG requires ASC API keys, proper codesigning credentials, hardened runtime settings, and notarytool submission followed by stapler ticket attachment to pass Gatekeeper verification.

How does stapling a notarization ticket to a DMG work?β–Ό

Stapling a notarization ticket attaches the Gatekeeper approval record directly to a DMG using stapler, ensuring offline verification and compliant macOS app distribution without requiring network access.

Do I need hardened runtime enabled before submitting a macOS app for notarization?β–Ό

Yes, hardened runtime settings must be applied via codesigning before notarization submission to meet Apple security requirements and ensure the notarytool validation process succeeds.

What is the best way to manage ASC API keys for macOS codesigning and notarization?β–Ό

Manage ASC API keys by securely provisioning credentials for codesigning and notarytool submission, ensuring proper access controls are in place for automated macOS notarization workflows.

Why does my macOS notarization fail during DMG verification?β–Ό

Notarization can fail during DMG verification due to incorrect hardened runtime settings, missing codesigning credentials, or improper ASC API key provisioning required by notarytool.