From c41f4392ca277bd2d36cde34e1f572e1ba25b86c Mon Sep 17 00:00:00 2001
From: "mr. m" <91018726+mauro-balades@users.noreply.github.com>
Date: Thu, 9 Jan 2025 12:06:39 +0000
Subject: [PATCH] Fixed macos licensing

---
 .github/workflows/macos-release-build.yml | 3 +++
 build/codesign/codesign.bash              | 8 ++++++++
 2 files changed, 11 insertions(+)

diff --git a/.github/workflows/macos-release-build.yml b/.github/workflows/macos-release-build.yml
index 3ad6a35e..e3bb8582 100644
--- a/.github/workflows/macos-release-build.yml
+++ b/.github/workflows/macos-release-build.yml
@@ -135,6 +135,9 @@ jobs:
         env:
           SURFER_COMPAT: ${{ matrix.arch }}
           ZEN_GA_DISABLE_PGO: true
+          MACOS_APPLE_ACCOUNT_ID: ${{ secrets.macOS_AppleAccountId }}
+          MACOS_APPLE_DEVELOPER_ID_TEAM_ID: ${{ secrets.macOS_AppleDeveloperIdTeamId }}
+          MACOS_APPLE_DEVELOPER_ID_PASSWORD: ${{ secrets.macOS_AppleDeveloperIdPassword }}
         run: |
           export SURFER_PLATFORM="darwin"
           export MACOS_APPLE_DEVELOPER_ID="${{ secrets.macOS_AppleDeveloperId }}"
diff --git a/build/codesign/codesign.bash b/build/codesign/codesign.bash
index bba6ec2d..25c07882 100644
--- a/build/codesign/codesign.bash
+++ b/build/codesign/codesign.bash
@@ -155,6 +155,14 @@ codesign --force -o runtime --verbose --sign "$IDENTITY" --deep \
 codesign -vvv --deep --strict "${BUNDLE}"
 
 # Staple the ticket
+xcrun notarytool submit "${BUNDLE}" \
+  --apple-id "${MACOS_APPLE_ACCOUNT_ID}" \
+  --team-id "${MACOS_APPLE_DEVELOPER_ID_TEAM_ID}" \
+  --password "${MACOS_APPLE_DEVELOPER_ID_PASSWORD}" \
+  --no-s3-acceleration \
+  --verbose \
+  --wait
+
 xcrun stapler staple --verbose "${BUNDLE}" || exit 0
 
 # Create a DMG