Failure notarizing package installer

[dkocher]

Because of native library in the Jansi library ¹ notarization fails with

{
  "logFormatVersion": 1,
  "jobId": "aef4ab93-efba-4038-811b-1f070d21a4a8",
  "status": "Invalid",
  "statusSummary": "Archive contains critical validation errors",
  "statusCode": 4000,
  "archiveFilename": "duck-8.5.5.39205.pkg",
  "uploadDate": "2023-01-26T15:25:31.394Z",
  "sha256": "690603ebbabd6a55c6ab5aa0a7e41fed194fdef6dc148eb84020ca928dac9149",
  "ticketContents": null,
  "issues": [
    {
      "severity": "error",
      "code": null,
      "path": "duck-8.5.5.39205.pkg/duck-8.5.5.39205.pkg Contents/Payload/usr/local/duck.bundle/Contents/Resources/jansi-2.4.0.jar/org/fusesource/jansi/internal/native/Mac/x86/libjansi.jnilib",
      "message": "The binary is not signed.",
      "docUrl": "https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721",
      "architecture": "i386"
    },
    {
      "severity": "error",
      "code": null,
      "path": "duck-8.5.5.39205.pkg/duck-8.5.5.39205.pkg Contents/Payload/usr/local/duck.bundle/Contents/Resources/jansi-2.4.0.jar/org/fusesource/jansi/internal/native/Mac/x86/libjansi.jnilib",
      "message": "The signature does not include a secure timestamp.",
      "docUrl": "https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733",
      "architecture": "i386"
    },
    {
      "severity": "error",
      "code": null,
      "path": "duck-8.5.5.39205.pkg/duck-8.5.5.39205.pkg Contents/Payload/usr/local/duck.bundle/Contents/Resources/jansi-2.4.0.jar/org/fusesource/jansi/internal/native/Mac/arm64/libjansi.jnilib",
      "message": "The binary is not signed with a valid Developer ID certificate.",
      "docUrl": "https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721",
      "architecture": "arm64"
    },
    {
      "severity": "error",
      "code": null,
      "path": "duck-8.5.5.39205.pkg/duck-8.5.5.39205.pkg Contents/Payload/usr/local/duck.bundle/Contents/Resources/jansi-2.4.0.jar/org/fusesource/jansi/internal/native/Mac/arm64/libjansi.jnilib",
      "message": "The signature does not include a secure timestamp.",
      "docUrl": "https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733",
      "architecture": "arm64"
    },
    {
      "severity": "error",
      "code": null,
      "path": "duck-8.5.5.39205.pkg/duck-8.5.5.39205.pkg Contents/Payload/usr/local/duck.bundle/Contents/Resources/jansi-2.4.0.jar/org/fusesource/jansi/internal/native/Mac/x86_64/libjansi.jnilib",
      "message": "The binary is not signed.",
      "docUrl": "https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721",
      "architecture": "x86_64"
    },
    {
      "severity": "error",
      "code": null,
      "path": "duck-8.5.5.39205.pkg/duck-8.5.5.39205.pkg Contents/Payload/usr/local/duck.bundle/Contents/Resources/jansi-2.4.0.jar/org/fusesource/jansi/internal/native/Mac/x86_64/libjansi.jnilib",
      "message": "The signature does not include a secure timestamp.",
      "docUrl": "https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733",
      "architecture": "x86_64"
    }
  ]
}

Footnotes

1. https://github.com/iterate-ch/cyberduck/blob/abac4ccf581b25c584c187192f31c257fa67093b/cli/pom.xml#L80-L84 ↩