codesign fixes

Author: uavinda

.github/workflows/apx-gcs-release.yml

@@ -132,6 +132,16 @@ jobs:
         run: |
           make release-package
 
+      - name: Notarize package
+        env:
+          NOTARIZATION_API_KEY_ID: ${{ secrets.NOTARIZATION_API_KEY_ID }}
+          NOTARIZATION_API_KEY: ${{ secrets.NOTARIZATION_API_KEY }}
+          NOTARIZATION_API_ISSUER: ${{ secrets.NOTARIZATION_API_ISSUER }}
+        run: |
+          echo $NOTARIZATION_API_KEY | base64 --decode > notarization_api_key
+          xcrun notarytool submit ${{ env.BUILD_DIR }}/deploy/*.dmg --key notarization_api_key --key-id $NOTARIZATION_API_KEY_ID --issuer $NOTARIZATION_API_ISSUER --wait
+          xcrun stapler staple ${{ env.BUILD_DIR }}/deploy/*.dmg
+
       - name: Upload artifacts
         uses: actions/upload-artifact@v4
         with:

cmake/apx_gcs_deploy.cmake

@@ -55,11 +55,22 @@ add_custom_target(
 add_custom_target(bundle DEPENDS deploy_libs)
 
 if(APPLE)
+    set(codesign_cmd
+        codesign
+        --deep
+        --force
+        --options
+        runtime
+        -s
+        $ENV{CODE_IDENTITY}
+    )
     add_custom_target(
         deploy_sign
-        COMMAND codesign --deep --force -s $ENV{CODE_IDENTITY} ${APX_INSTALL_APP_DIR}
+        COMMAND ${codesign_cmd} ${APX_INSTALL_DATA_DIR}/xplane/ApxSIL_Darwin_universal.xpl
+        COMMAND ${codesign_cmd} ${APX_INSTALL_BIN_DIR}/gcs
+        COMMAND ${codesign_cmd} ${APX_INSTALL_APP_DIR}
         COMMENT "Signing app with $ENV{CODE_IDENTITY}"
-        DEPENDS deploy_libs
+        # DEPENDS deploy_libs
         WORKING_DIRECTORY ${APX_DEPLOY_DIR}
         VERBATIM USES_TERMINAL
     )