-
Notifications
You must be signed in to change notification settings - Fork 8.3k
Notarize installation packages #19363
Copy link
Copy link
Closed
Labels
Issue-Enhancementthe issue is more of a feature request than a bugthe issue is more of a feature request than a bugOS-macOSResolution-DuplicateThe issue is a duplicate.The issue is a duplicate.WG-Maintainers-Buildspecific to affecting the buildspecific to affecting the build
Description
Metadata
Metadata
Assignees
Labels
Issue-Enhancementthe issue is more of a feature request than a bugthe issue is more of a feature request than a bugOS-macOSResolution-DuplicateThe issue is a duplicate.The issue is a duplicate.WG-Maintainers-Buildspecific to affecting the buildspecific to affecting the build
Type
Fields
Give feedbackNo fields configured for issues without a type.
Summary of the new feature / enhancement
As an administrator that needs to be able to safely and securely distribute software to developers, I would like to request that all future macOS installation packages for PowerShell for macOS follow Apple standard guidelines for safely distributing software and begin notarizing and stapling all PKGs.
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution
https://developer.apple.com/documentation/notaryapi
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/customizing_the_notarization_workflow
Many security and automation tools check for notarization (as well as macOS itself during a manual install) in order to ensure the integrity and safety of a package before its run.
Proposed technical implementation details (optional)
No response