signed and notarized mac deliverable

.github/entitlements.plist

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>com.apple.security.app-sandbox</key>
+  <false/>
+</dict>
+</plist>

.github/gon-notarize.json

@@ -1,11 +1,25 @@
 {
-  "notarize": [{
-    "path": "./build/macOS.zip",
-    "bundle_id": "com.lthn.app",
-    "staple": false
-  }],
+  "source" : [
+    "./build/packaged/letheand",
+    "./build/packaged/lethean-blockchain-export",
+    "./build/packaged/lethean-blockchain-import",
+    "./build/packaged/lethean-wallet-cli",
+    "./build/packaged/lethean-wallet-rpc",
+    "./build/packaged/lethean-wallet-vpn-rpc"
+  ],
+  "bundle_id": "com.lthn.app",
+  "sign" :{
+    "application_identity" : "Developer ID Application: Lethean LTD (W2DNA5L5DY)"
+  },
   "apple_id": {
     "username": "snider@lt.hn",
     "password": "@env:APPLE_PASSWORD"
+  },
+  "dmg" :{
+    "output_path":  "lethean-cli-macos.dmg",
+    "volume_name":  "lethean-cli"
+  },
+  "zip" :{
+    "output_path" : "lethean-cli-macos.zip"
   }
 }

.github/workflows/macos.yml

@@ -18,16 +18,8 @@ on:
     paths-ignore:
       - '**.md'
 
-# The below variables reduce repetitions across similar targets
 env:
   REMOVE_BUNDLED_BOOST : rm -rf /usr/local/share/boost
-  BUILD_DEFAULT_LINUX: |
-        cmake -S . -B build -D ARCH="default" -D BUILD_TESTS=ON -D CMAKE_BUILD_TYPE=release && cmake --build build -j3
-  APT_INSTALL_LINUX: 'sudo apt -y install build-essential cmake libboost-all-dev miniupnpc libunbound-dev graphviz doxygen libunwind8-dev pkg-config libssl-dev libzmq3-dev libsodium-dev libhidapi-dev libnorm-dev libusb-1.0-0-dev libpgm-dev libprotobuf-dev protobuf-compiler ccache'
-  APT_SET_CONF: |
-        echo "Acquire::Retries \"3\";"         | sudo tee -a /etc/apt/apt.conf.d/80-custom
-        echo "Acquire::http::Timeout \"120\";" | sudo tee -a /etc/apt/apt.conf.d/80-custom
-        echo "Acquire::ftp::Timeout \"120\";"  | sudo tee -a /etc/apt/apt.conf.d/80-custom
   CCACHE_SETTINGS: |
         ccache --max-size=150M
         ccache --set-config=compression=true
@@ -60,31 +52,27 @@ jobs:
     - name: Import Code-Signing Certificates for macOS
       uses: Apple-Actions/import-codesign-certs@v1
       with:
-        # The certificates in a PKCS12 file encoded as a base64 string
         p12-file-base64: ${{ secrets.MAC_DEVELOPER_CERT }}
-        # The password used to import the PKCS12 file.
         p12-password: ${{ secrets.MAC_DEVELOPER_PASS }}
     - run: make ci-release
     - run: chmod +x build/packaged/lethean*
-    - run: "codesign --options runtime -s 'Developer ID Application: Lethean LTD (W2DNA5L5DY)' build/packaged/lethean*"
-    - name: Notarize
+    - name: Codesign
       env:
           APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }}
       run: |
           cp LICENSE build/packaged/LICENSE
-          ditto -c -k --keepParent ./build/packaged ./build/macOS.zip
           gon -log-level=info ./.github/gon-notarize.json
     - uses: actions/upload-artifact@v2
       with:
-        name: macOS.zip
-        path: ${{ github.workspace }}/build/macOS.zip
-    - name: Get the version
-      id: get_version
-      if: startsWith(github.ref, 'refs/tags/')
-      run: echo ::set-output name=VERSION::${GITHUB_REF/refs\/tags\//}
+        name: macOS
+        path: |
+           lethean-cli-macos.dmg
+           lethean-cli-macos.zip
     - name: Release
       uses: softprops/action-gh-release@v1
       if: startsWith(github.ref, 'refs/tags/')
       with:
-        files: ${{ github.workspace }}/build/macOS.tar
+        files: |
+          lethean-cli-macos.dmg
+          lethean-cli-macos.zip