From 1ac68bf89662e611a3f1d06d202a65fc9314c48a Mon Sep 17 00:00:00 2001
From: Dominik Polakovics <dominik.polakovics@cloonar.com>
Date: Sun, 19 Jan 2025 16:17:03 +0100
Subject: [PATCH] feat: add notarization for apple

---
 .chatgpt_config.yaml          |  7 +++++++
 .github/workflows/release.yml | 14 ++++++++++++++
 main.go                       |  2 +-
 3 files changed, 22 insertions(+), 1 deletion(-)

diff --git a/.chatgpt_config.yaml b/.chatgpt_config.yaml
index 01e37a9..0c16c00 100644
--- a/.chatgpt_config.yaml
+++ b/.chatgpt_config.yaml
@@ -2,5 +2,12 @@ project_name: "soundscape-sync"
 default_prompt_blocks:
   - "basic-prompt"
   - "go-development"
+  - "secure-coding"
+  - "workflow-prompt"
 initial_files:
   - "README.md"
+
+preview_changes: false
+interactive_file_selection: false
+partial_acceptance: false
+enable_step_by_step: true
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9f7968f..25d742c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -100,6 +100,20 @@ jobs:
       run: codesign --verify --deep --strict --verbose=2 SoundscapeSync.app
     - name: Zip macOS build
       run: zip -r SoundscapeSync.app.zip SoundscapeSync.app
+    - name: Notarize App
+      if: ${{ secrets.APPLE_ID && secrets.APPLE_TEAM_ID && secrets.APPLE_PASSWORD }}
+      env:
+        APPLE_ID: ${{ secrets.APPLE_ID }}
+        APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
+        APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }}
+      run: |
+        xcrun notarytool submit SoundscapeSync.app.zip --apple-id "$APPLE_ID" --team-id "$APPLE_TEAM_ID" --password "$APPLE_PASSWORD" --wait
+    - name: Staple Notarization
+      if: ${{ secrets.APPLE_ID && secrets.APPLE_TEAM_ID && secrets.APPLE_PASSWORD }}
+      run: xcrun stapler staple SoundscapeSync.app
+    - name: Re-zip macOS build
+      if: ${{ secrets.APPLE_ID && secrets.APPLE_TEAM_ID && secrets.APPLE_PASSWORD }}
+      run: zip -r SoundscapeSync.app.zip SoundscapeSync.app
     - name: Upload macOS artifact
       uses: actions/upload-artifact@v4
       with:
diff --git a/main.go b/main.go
index 9533a2f..eaa6a70 100644
--- a/main.go
+++ b/main.go
@@ -21,7 +21,7 @@ import (
 const (
     owner      = "dpolakovics"
     repo       = "soundscape-sync"
-    currentTag = "v1.0.0"
+    currentTag = "v1.0.2"
 )
 
 func main() {