fix: App rejected when Mac Developer certificate is in keychain

Closes electron-userland/electron-builder#890

README.md

@@ -150,6 +150,11 @@ Default to system default keychain.
 Regex or function that signals ignoring a file before signing.
 Default to `undefined`.
 
+`gatekeeper-assess` - *Boolean*
+
+Flag to enable Gatekeeper assessment after signing the app. Disabling it is useful for signing with self-signed certificates.
+Gatekeeper assessment is enabled by default.
+
 `platform` - *String*
 
 Build platform of Electron.

bin/electron-osx-sign-usage.txt

@@ -35,6 +35,10 @@ DESCRIPTION
     The keychain name.
     Default to system default keychain.
 
+  --gatekeeper-assess, --no-gatekeeper-assess
+    Flag to enable Gatekeeper assessment after signing the app. Disabling it is useful for signing with self-signed certificates.
+    Gatekeeper assessment is enabled by default.
+
   --platform=platform
     Build platform of Electron.
     Allowed values: ``darwin'', ``mas''.

bin/electron-osx-sign.js

@@ -6,11 +6,13 @@ var args = require('minimist')(process.argv.slice(2), {
   'boolean': [
     'help',
     'pre-auto-entitlements',
-    'pre-embed-provisioning-profile'
+    'pre-embed-provisioning-profile',
+    'gatekeeper-assess'
   ],
   'default': {
     'pre-auto-entitlements': true,
-    'pre-embed-provisioning-profile': true
+    'pre-embed-provisioning-profile': true,
+    'gatekeeper-assess': true
   }
 })
 var usage = fs.readFileSync(path.join(__dirname, 'electron-osx-sign-usage.txt')).toString()

index.d.ts

@@ -11,6 +11,7 @@ declare module "electron-macos-sign" {
     binaries?: string[];
     entitlements?: string;
     'entitlements-inherit'?: string;
+    'gatekeeper-check'?: boolean;
   }
 
   export function sign(opts: SignOptions, callback: (error: Error) => void): void;

package.json

@@ -1,6 +1,6 @@
 {
   "name": "electron-macos-sign",
-  "version": "1.2.1",
+  "version": "1.2.3",
   "description": "Codesign Electron macOS apps",
   "main": "index.js",
   "files": ["bin", "*.js", "*.d.ts", "*.plist"],

sign.js

@@ -92,7 +92,7 @@ function verifySignApplicationAsync (opts) {
   ])
 
   // Additionally test Gatekeeper acceptance for darwin platform
-  if (opts.platform === 'darwin') {
+  if (opts.platform === 'darwin' && opts['gatekeeper-assess'] !== false) {
     promise = promise
       .then(function () {
         debuglog('Verifying Gatekeeper acceptance for darwin platform...')