Replace gon macos signing with notarytool

Signed-off-by: Dom Del Nano <[email protected]>

.github/workflows/cli_release.yaml

@@ -87,8 +87,6 @@ jobs:
         fetch-depth: 0
     - name: Add pwd to git safe dir
       run: git config --global --add safe.directory `pwd`
-    - name: Install gon
-      run: brew install mitchellh/gon/gon
     - name: Sign CLI release
       env:
         REF: ${{ github.event.ref }}

ci/cli_merge_sign.sh

@@ -48,7 +48,13 @@ done
 # Create a universal binary.
 lipo -create -output cli_darwin_universal cli_darwin_arm64 cli_darwin_amd64
 
-gon ci/gon.hcl
+export TEAM_ID="SZCNTABEXY"
+export APP_IDENTITY="Developer ID Application: Pixie Labs Inc. (${TEAM_ID})"
+codesign -f -v --timestamp --options runtime -s "${APP_IDENTITY}" cli_darwin_universal cli_darwin_arm64 cli_darwin_amd64
+
+notarytool submit cli_darwin_universal --apple-id [email protected] --password "${AC_PASSWD}" --team-id "${TEAM_ID}" --bundle-id ai.pixielabs.px --progress --verbose --wait
+notarytool submit cli_darwin_amd64 --apple-id [email protected] --password "${AC_PASSWD}" --team-id "${TEAM_ID}" --bundle-id ai.pixielabs.px --progress --verbose --wait
+notarytool submit cli_darwin_arm64 --apple-id [email protected] --password "${AC_PASSWD}" --team-id "${TEAM_ID}" --bundle-id ai.pixielabs.px --progress --verbose --wait
 
 cp cli_darwin_universal "${artifacts_dir}"
 cp cli_darwin_amd64 "${artifacts_dir}"