Got as far as I can without a certificate

.goreleaser.yaml

@@ -7,13 +7,28 @@ before:
     # you may remove this if you don't need go generate
     - go generate ./...
 builds:
-  - env:
+  - binary: overmind
+    id: overmind
+    env:
       - CGO_ENABLED=0
     goos:
       - linux
       - windows
+  - binary: overmind
+    id: overmind-macos
+    env:
+      - CGO_ENABLED=0
+    goos:
       - darwin
-    binary: overmind
+
+signs:
+  - signature: "${artifact}.dmg"
+    ids:
+    - overmind-macos # here we filter the macos only build id
+    cmd: gon
+    args:
+      - gon.json
+    artifacts: all
 
 archives:
   - format: tar.gz

go.sum

@@ -1,5 +1,3 @@
-connectrpc.com/connect v1.14.0 h1:PDS+J7uoz5Oui2VEOMcfz6Qft7opQM9hPiKvtGC01pA=
-connectrpc.com/connect v1.14.0/go.mod h1:uoAq5bmhhn43TwhaKdGKN/bZcGtzPW1v+ngDTn5u+8s=
 connectrpc.com/connect v1.15.0 h1:lFdeCbZrVVDydAqwr4xGV2y+ULn+0Z73s5JBj2LikWo=
 connectrpc.com/connect v1.15.0/go.mod h1:bQmjpDY8xItMnttnurVgOkHUBMRT9cpsNi2O4AjKhmA=
 github.com/auth0/go-jwt-middleware/v2 v2.2.1 h1:pqxEIwlCztD0T9ZygGfOrw4NK/F9iotnCnPJVADKbkE=
@@ -71,12 +69,6 @@ github.com/nats-io/nkeys v0.4.7 h1:RwNJbbIdYCoClSDNY7QVKZlyb/wfT6ugvFCiKy6vDvI=
 github.com/nats-io/nkeys v0.4.7/go.mod h1:kqXRgRDPlGy7nGaEDMuYzmiJCIAAWDK0IMBtDmGD0nc=
 github.com/nats-io/nuid v1.0.1 h1:5iA8DT8V7q8WK2EScv2padNa/rTESc1KdnPw4TC2paw=
 github.com/nats-io/nuid v1.0.1/go.mod h1:19wcPz3Ph3q0Jbyiqsd0kePYG7A95tJPxeL+1OSON2c=
-github.com/overmindtech/sdp-go v0.65.0 h1:WX9Ue0adOHB1LYvn4uSlVEWpWBqhVOTfHswo64ws1L0=
-github.com/overmindtech/sdp-go v0.65.0/go.mod h1:9wKdnCDCGKku0T/BeGemk8Uk5Lj9mYVMohxufmN2HVo=
-github.com/overmindtech/sdp-go v0.66.0 h1:Xhf9TjjO0KxUwq1MHFSnpb4AZ50CAV1gH7zt0i0RZh4=
-github.com/overmindtech/sdp-go v0.66.0/go.mod h1:9wKdnCDCGKku0T/BeGemk8Uk5Lj9mYVMohxufmN2HVo=
-github.com/overmindtech/sdp-go v0.66.1 h1:yuPdP0i0s4vWgsLt4QiX3qEdUzcqHjQ1d06ubWRLF84=
-github.com/overmindtech/sdp-go v0.66.1/go.mod h1:p8+DRx17Og086v9NeACpoFO4vbpThozyROzECPIxFSY=
 github.com/overmindtech/sdp-go v0.66.2 h1:NUW1lvx9uJekjRsgFgJdKUBOD1Jy2Ahbe+JRl84mgHQ=
 github.com/overmindtech/sdp-go v0.66.2/go.mod h1:p8+DRx17Og086v9NeACpoFO4vbpThozyROzECPIxFSY=
 github.com/pelletier/go-toml/v2 v2.1.0 h1:FnwAJ4oYMvbT/34k9zzHuZNrhlz48GB3/s6at6/MHO4=

gon.json

@@ -0,0 +1,14 @@
+{
+    "source" : ["./overmind"],
+    "bundle_id" : "tech.overmind.cli",
+    "apple_id": {
+        "username" : "[email protected]"
+    },
+    "sign" :{
+        "application_identity" : "TODO: Get this from our cert once generated"
+    },
+    "dmg" :{
+        "output_path":  "overmind-cli.dmg",
+        "volume_name":  "Overmind CLI"
+    }
+}