Thank you Quinn! Here's the direct download link to the installer package: https://github.com/Nakanokappei/window-resize/releases/download/v2.0/Window.Resize.pkg This is a Developer ID Installer–signed and notarized .pkg built with productbuild --sign. The .zip distribution of the same app passes Gatekeeper without issue. For reference, here's what I see: # Signature is valid pkgutil --check-signature Window Resize.pkg # → signed by Developer ID Installer certificate # Notarization succeeded xcrun stapler validate Window Resize.pkg # → The validate action worked! # But spctl rejects it spctl -a --type install Window Resize.pkg # → rejected # syspolicyd log shows # meetsDeveloperIDLegacyAllowedPolicy = 0 The productbuild --sign does emit Warning: unable to build chain to self-signed root but security verify-cert confirms the cert chain is valid. Happy to file a bug with the .pkg attached if that's easier for you.
Topic:
Code Signing
SubTopic:
Notarization
Tags: