Versions:
Quill is a cross-platform utility developed by Anchore Inc that enables developers to cryptographically sign and notarize macOS binaries from Windows, Linux, or macOS workstations without requiring a local Xcode installation. Released in version 0.5.1 as the second public iteration, the open-source tool addresses the frequent CI/CD bottleneck created by Apple’s mandatory code-signing and notarization gates, allowing teams building Mac software on cloud or non-Mac runners to complete the security workflow entirely in-script. Typical use cases include automating the signing of Electron, Qt, or Swift-built .app bundles inside GitHub Actions, GitLab CI, or Jenkins pipelines, uploading the resulting disk image or zip to Apple’s notarization service, stapling the ticket, and validating the finished artifact before distribution. By wrapping the underlying altool, stapler, and codesign commands in a lightweight Go binary, Quill abstracts away certificate conversion, entitlements merging, and JSON status polling, exposing only a minimal CLI surface that accepts a .p12 key, provisioning profile, and notarization credentials as parameters. The software is therefore categorized under Developer Tools / Code Signing & Notarization. Although native to macOS security processes, the program’s ability to run on any OS makes it attractive to organizations that maintain mixed-platform build farms or wish to avoid dedicating physical Mac hardware for every signing job. Quill is available for free on wget.nero.com, with downloads provided via trusted Windows package sources (e.g. winget), always delivering the latest version, and supporting batch installation of multiple applications.
Tags: