I'm developing a plugin for a 3rd party app that consists of a bundle with a custom file extension (not 'app', specifically.)
I'm running into issues with getting the plugin to load when the host app starts. It works fine on the system the plugin is compiled on, but on any other machine I get the "apple can't check app for malicious software" dialog.
spctl -vvv --assess --type exec <my plugin> shows:
rejected (the code is valid but does not seem to be an app)
Other plugins for the same app produce the same output from spctl. This makes sense - a plugin is not an app.
Aside from that, all the signing, notarization and stapling steps outlined here (https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/customizing_the_notarization_workflow) complete with no issues.
Any ideas on how to get the plugin to load? How are shared libraries supposed to be signed and notarized, anyway? The documentation mostly assumes that people are interested in notarizing apps and there's very little mention of anything that's not an app.
Thanks,
Ori Pessach