asc-notarization

Archive, sign, and notarize macOS apps with xcodebuild and the Apple Notary API.

Updated Feb 16, 2026
One-click install
npx skills add https://github.com/dustinober1/sundee-fundee-ios --skill asc-notarization-dustinober1
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: asc-notarization
Source: https://github.com/dustinober1/sundee-fundee-ios/tree/main/SundeeFundeeApp/.agents/skills/asc-notarization
Command: npx skills add https://github.com/dustinober1/sundee-fundee-ios --skill asc-notarization-dustinober1

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Distributing a macOS app outside the App Store requires Developer ID signing and Apple notarization, a multi-step process with cryptic failure modes like broken certificate trust settings and missing secure timestamps. This Skill walks through the entire pipeline from archive to stapled, notarized artifact. ## Core Features & Use Cases - End-to-End Notarization Pipeline: Archive with xcodebuild, export with Developer ID signing, ZIP the bundle, submit via the asc CLI, and staple the ticket. - Certificate Troubleshooting: Diagnose and fix invalid trust settings, verify the Developer ID certificate chain, and handle Developer ID Installer certificates for PKG files. - Failure Diagnosis: Fetch notarization status and developer logs to resolve issues like unsigned nested binaries or missing hardened runtime. - Use Case: You have a signed macOS app ready for direct download distribution. Use this Skill to export it with Developer ID, submit it to Apple's Notary API, wait for approval, and staple the ticket so it passes Gatekeeper offline. ## Quick Start Notarize my macOS app by archiving the Xcode scheme, exporting it with Developer ID signing, and submitting the ZIP to Apple with asc notarization.

Frequently Asked Questions about asc-notarization

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I notarize a macOS app for distribution outside the App Store?▼

Archive the app with xcodebuild, export it using an ExportOptions plist with method developer-id, ZIP the signed bundle with ditto, then submit it with asc notarization submit --wait. After approval, staple the ticket with xcrun stapler.

How to fix invalid trust settings error during xcodebuild export?▼

The Developer ID certificate has custom trust overrides that break the chain. Export the certificate with security find-certificate, then run security remove-trusted-cert to clear the overrides, and verify the chain with codesign.

Can I notarize a PKG installer package with the Apple Notary API?▼

Yes, but PKG files require a Developer ID Installer certificate, which is separate from Developer ID Application and must be created on the Apple Developer website. Sign the package with productsign before submitting it with asc notarization submit.

Why does notarization return Invalid when my app is signed correctly?▼

Fetch the developer log with asc notarization log to see specific issues. Common causes include unsigned nested binaries, missing hardened runtime, or embedded libraries without secure timestamps.

Does asc notarization handle large file uploads?▼

Yes, files upload directly to Apple's S3 bucket with streaming, and files over 5 GB use multipart upload automatically. For slow connections, set ASC_UPLOAD_TIMEOUT to a longer duration such as 5m.