tools: add macOS notarization verification step

PR-URL: nodejs/node#50833 Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Michael Dawson <midawson@redhat.com>
sercher · Apr 25, 2024 · e99a255 · e99a255
1 parent 2fac833
commit e99a255
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/graal-nodejs/tools/osx-notarize.sh b/graal-nodejs/tools/osx-notarize.sh
@@ -48,5 +48,12 @@ else
   exit 1
 fi
 
+if ! xcrun spctl --assess --type install --context context:primary-signature --ignore-cache --verbose=2 "node-$pkgid.pkg"; then
+  echo "error: Signature will not be accepted by Gatekeeper!" 1>&2
+  exit 1
+else
+  echo "Verification was successful."
+fi
+
 xcrun stapler staple "node-$pkgid.pkg"
 echo "Stapler was successful."