Is there an option to only sign using the "sign & notarize" feature in v1.26?

[dehanj]

Hi,
I'm using Gon, but are trying the new integrated feature to sign macho binaries (from v1.26). What is driving me to use this instead, is the possibility to do it on any platform.

I wonder if there is a way to only use the signing feature? We are not using Notarization at the moment.

I have tried this using quill on the command line, and it works fine to only sign.
When I adapt my config to use it directly in Goreleaser it fails with this message:

  • sign & notarize macOS binaries
    • signing                                        binary=dist/darwin_universal_darwin_all/tkey-verification
    • sending notarize request                       binary=dist/darwin_universal_darwin_all/tkey-verification
    • took: 1s
  ⨯ release failed after 1s                  error=notarize: macos: dist/darwin_universal_darwin_all/tkey-verification: unable to parse EC private key for JWT: invalid key: Key must be a PEM encoded PKCS1 or PKCS8 key

The signing works, but I want to disable Notarization. Is that possible?

[caarlos0]

hey, it's not possible right now, definitely something to add though

[caarlos0]

opened #4890

[dehanj]

Thanks, appreciate it. Would be useful for us!

[caarlos0]

would something like #4919 do the trick?

[dehanj]

would something like #4919 do the trick?

Looks promising, will comment directly in the PR!