From f25fe032c4dd79d4bd1a4d7303000d568eb9bb2b Mon Sep 17 00:00:00 2001
From: Peter Steinberger <steipete@gmail.com>
Date: Thu, 15 Jan 2026 11:21:15 +0000
Subject: [PATCH] fix(macos): codesign dmg before notarize

---
 scripts/package-mac-dist.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/scripts/package-mac-dist.sh b/scripts/package-mac-dist.sh
index 6a0b6db95..8ea373a8b 100755
--- a/scripts/package-mac-dist.sh
+++ b/scripts/package-mac-dist.sh
@@ -45,5 +45,9 @@ echo "💿 DMG: $DMG"
 "$ROOT_DIR/scripts/create-dmg.sh" "$APP" "$DMG"
 
 if [[ "$NOTARIZE" == "1" ]]; then
+  if [[ -n "${SIGN_IDENTITY:-}" ]]; then
+    echo "🔏 Signing DMG: $DMG"
+    /usr/bin/codesign --force --sign "$SIGN_IDENTITY" --timestamp "$DMG"
+  fi
   "$ROOT_DIR/scripts/notarize-mac-artifact.sh" "$DMG"
 fi