Versions:
Quill is a cross-platform utility developed by Anchore Inc that enables developers to cryptographically sign and notarize macOS binaries without requiring a local macOS workstation. Targeting the code-signing category, the tool addresses the frequent CI/CD scenario in which Windows or Linux build servers produce a macOS executable that must subsequently pass Apple’s Gatekeeper validation before distribution. By wrapping the underlying codesign and notarytool workflows in a minimal command-line interface, Quill accepts a Developer ID certificate, provisioning profile, and app bundle from any operating system, then coordinates the remote signing and notarization process through Apple’s cloud services. Typical use cases include automated nightly builds of Electron, Qt, or Go applications that target macOS, allowing teams to ship signed and stapled .app or .dmg artifacts directly from Linux-based GitHub Actions, GitLab runners, or Jenkins nodes. The current stable branch is version 0.7.1, the third public release, and the project maintains backward compatibility with earlier 0.6.x and 0.5.x streams for organizations that have standardized on specific argument sets. Because Quill is distributed as a statically linked Go binary, it can be invoked natively on Windows, macOS, or Linux build agents with no additional runtime dependencies, simplifying pipeline configuration and reducing the need for dedicated Mac hardware in secure build farms. The software is available for free on get.nero.com, with downloads provided via trusted Windows package sources (e.g. winget), always delivering the latest version, and supporting batch installation of multiple applications.
Tags: