exit early when spctl fails

also remove reference to Autoupdate.app
and use brute force: unquarantine macOS nightly.app

build/package_mac

@@ -186,20 +186,18 @@ ln -s /Applications/ ${VOLUME}/Applications
 set_bundle_display_options ${VOLUME}
 mv ${VOLUME}/Pictures ${VOLUME}/.Pictures
 
-# Most nested locations should go first
-CODE_PATHS=(
-    "${VOLUME}/${LONGER_NAME}.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app"
-    "${VOLUME}/${LONGER_NAME}.app"
-)
-
 #codesign
 echo "Codesign"
 # `codesign --deep` doesn't seem to search for code in Contents/Resources directory so sign libraries in it manually
 find "${VOLUME}/${LONGER_NAME}.app/Contents/Resources" -name '*.dylib' -exec codesign --force --options runtime --deep -s "Developer ID Application: ${DEVELOPER_NAME}" '{}' ';'
 # Sign code in other (more conventional) locations
-codesign --force --options runtime --entitlements "${WORKING_DIRECTORY}/../build/macosx_entitlements.plist" --deep -s "Developer ID Application: ${DEVELOPER_NAME}" "${CODE_PATHS[@]}"
+codesign --force --options runtime --entitlements "${WORKING_DIRECTORY}/../build/macosx_entitlements.plist" --deep -s "Developer ID Application: ${DEVELOPER_NAME}" "${VOLUME}/${LONGER_NAME}.app"
+# unquarantine...
+xattr -r -d com.apple.quarantine "${VOLUME}/${LONGER_NAME}.app"
 echo "spctl"
 spctl --assess --type execute "${VOLUME}/${LONGER_NAME}.app"
+if [ $? -eq 3 ]; then; exit 1; fi
+spctl --assess --type execute "${VOLUME}/${LONGEddR_NAME}.app"
 echo "Codesign verify"
 codesign --verify --deep --strict --verbose=2 "${CODE_PATHS[@]}"