u/Both_Independent8523

Hey folks,

I’m building a macOS app with Tauri and running into a common issue: when others download and open my app, they get this error:

>“XXX.app is damaged and can’t be opened. You should move it to the Trash.”

I know this is Gatekeeper blocking unsigned/unnotarized apps, but I’m looking for the simplest, most user-friendly way to fix it for end users.

What I’ve tried so far:

• Ad-hoc signing with "signingIdentity": "-" in tauri.conf.json
• Building DMG with Tauri CLI
• Users have to run xattr -rd com.apple.quarantine /path/to/app to open it

But I want a solution where users can just double‑click and open without terminal commands or security workarounds.

My questions:

1. What’s the minimal setup to avoid the “damaged” prompt for public distribution?
2. Do I need a paid Apple Developer account ($99/year) for notarization?Tauri
3. Are there any alternatives (free or low‑cost) for small indie devs?
4. How do you handle code signing/notarization in your Tauri workflow?

Thanks in advance for sharing your experience!