I’m building a new TF Provider. I’m going to use GoReleaser to cross-compile binaries for each distro Terraform supports (which seems to be a recommended setup), sign them with our team-specific GPG key, and upload them to our public Github repository as release artifacts. This is required for the Terraform Registry. We will likely need to create notarized MacOS apps. GoReleaser can sign binaries with gon which will notarize them (which is more than signing, e.g., requires connecting to Apple’s servers).
Is MacOS notarization required or automagically handled by Terraform Registry somehow?