From 9436e4595262a252939a941a2b6f314b0c756c93 Mon Sep 17 00:00:00 2001
From: Erik Gomez <egomez@coreweave.com>
Date: Tue, 12 May 2026 12:38:27 -0500
Subject: [PATCH] add a notary tool log submision fetcher

---
 .github/workflows/notary_log.yml | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)
 create mode 100644 .github/workflows/notary_log.yml

diff --git a/.github/workflows/notary_log.yml b/.github/workflows/notary_log.yml
new file mode 100644
index 0000000..cc94703
--- /dev/null
+++ b/.github/workflows/notary_log.yml
@@ -0,0 +1,24 @@
+name: Fetch notary log
+
+on:
+  workflow_dispatch:
+    inputs:
+      submission_id:
+        description: "Notarization submission UUID"
+        required: true
+        type: string
+
+jobs:
+  log:
+    runs-on: macos-latest
+
+    steps:
+    - name: Fetch notary log
+      env:
+        SUBMISSION_ID: ${{ inputs.submission_id }}
+        NOTARY_APP_PASSWORD: ${{ secrets.NOTARY_APP_PASSWORD_MAOS }}
+      run: |
+        xcrun notarytool log "$SUBMISSION_ID" \
+          --apple-id "opensource@macadmins.io" \
+          --team-id "T4SK8ZXCXG" \
+          --password "$NOTARY_APP_PASSWORD"