Apple notarization fails

[jacklandrin]

When I upload my app to notarise, it shows these errors:

{
  "logFormatVersion": 1,
  "jobId": "bbffa242-cee3-4322-829d-40d9304987ba",
  "status": "Invalid",
  "statusSummary": "Archive contains critical validation errors",
  "statusCode": 4000,
  "archiveFilename": "Only_Switch.dmg",
  "uploadDate": "2022-01-18T18:46:46Z",
  "sha256": "49413569a787e1bb79851f55dddcad27322e74b5bad8280b2624138d894eefb6",
  "ticketContents": null,
  "issues": [
    {
      "severity": "error",
      "code": null,
      "path": "Only_Switch.dmg/Only Switch.app/Contents/Library/LoginItems/LaunchAtLoginHelper.app/Contents/MacOS/LaunchAtLoginHelper",
      "message": "The signature of the binary is invalid.",
      "docUrl": null,
      "architecture": "x86_64"
    },
    {
      "severity": "error",
      "code": null,
      "path": "Only_Switch.dmg/Only Switch.app/Contents/Library/LoginItems/LaunchAtLoginHelper.app/Contents/MacOS/LaunchAtLoginHelper",
      "message": "The signature does not include a secure timestamp.",
      "docUrl": null,
      "architecture": "x86_64"
    },
    {
      "severity": "error",
      "code": null,
      "path": "Only_Switch.dmg/Only Switch.app/Contents/Library/LoginItems/LaunchAtLoginHelper.app/Contents/MacOS/LaunchAtLoginHelper",
      "message": "The executable requests the com.apple.security.get-task-allow entitlement.",
      "docUrl": null,
      "architecture": "x86_64"
    },
    {
      "severity": "error",
      "code": null,
      "path": "Only_Switch.dmg/Only Switch.app/Contents/Library/LoginItems/LaunchAtLoginHelper.app/Contents/MacOS/LaunchAtLoginHelper",
      "message": "The signature of the binary is invalid.",
      "docUrl": null,
      "architecture": "arm64"
    },
    {
      "severity": "error",
      "code": null,
      "path": "Only_Switch.dmg/Only Switch.app/Contents/Library/LoginItems/LaunchAtLoginHelper.app/Contents/MacOS/LaunchAtLoginHelper",
      "message": "The signature does not include a secure timestamp.",
      "docUrl": null,
      "architecture": "arm64"
    },
    {
      "severity": "error",
      "code": null,
      "path": "Only_Switch.dmg/Only Switch.app/Contents/Library/LoginItems/LaunchAtLoginHelper.app/Contents/MacOS/LaunchAtLoginHelper",
      "message": "The executable requests the com.apple.security.get-task-allow entitlement.",
      "docUrl": null,
      "architecture": "arm64"
    },
    {
      "severity": "error",
      "code": null,
      "path": "Only_Switch.dmg/Only Switch.app/Contents/MacOS/OnlySwitch",
      "message": "The signature of the binary is invalid.",
      "docUrl": null,
      "architecture": "x86_64"
    },
    {
      "severity": "error",
      "code": null,
      "path": "Only_Switch.dmg/Only Switch.app/Contents/MacOS/OnlySwitch",
      "message": "The signature of the binary is invalid.",
      "docUrl": null,
      "architecture": "arm64"
    }
  ]
}

I tested the signature:

codesign -vvv --deep --strict /Applications/Only\ Switch.app/Contents/Library/LoginItems/LaunchAtLoginHelper.app/Contents/MacOS/LaunchAtLoginHelper
/Applications/Only Switch.app/Contents/Library/LoginItems/LaunchAtLoginHelper.app/Contents/MacOS/LaunchAtLoginHelper: invalid Info.plist (plist or signature have been modified)
In architecture: x86_64

[sindresorhus]

Make sure you have followed the instructions correctly. Issues like these are usually on the user's end. I also use LaunchAtLogin in 10+ apps without any problem.

[jacklandrin]

Thanks for reply. I'll check my certification. I found there are two same name certifications in my keychain, and they are conflict, when I codesign.

[jacklandrin]

It works now.