From 603de4eb191fb9e1393d0514bce06b5e9a391ea4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Thomas=20V=C3=A9rin?= <thomas.verin@sonarsource.com>
Date: Wed, 8 Jul 2026 08:52:24 +0200
Subject: [PATCH] fix(ci): remove stapler from macOS CLI signing

xcrun stapler only works on .app/.dmg/.pkg bundles, not bare Mach-O
binaries. Codesign + notarization still succeed; stapler was failing with
"Stapler is incapable of working with Document files" (exit 66).

Aligns with sonarqube-cli which notarizes but does not staple raw binaries.
---
 .github/workflows/build.yml | 2 --
 1 file changed, 2 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 1629427..d072487 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -189,8 +189,6 @@ jobs:
             zip "$archive" "$binary"
             xcrun notarytool submit "$archive" --apple-id "$APPLE_ID" --password "$APPLE_APP_SPECIFIC_PASSWORD" --team-id "$APPLE_TEAM_ID" --wait
             rm "$archive"
-            xcrun stapler staple "$binary"
-            xcrun stapler validate "$binary"
           }
 
           while IFS= read -r -d '' binary; do