sign and notify for tags only

.ci/macos-build.sh

+#!/bin/bash
+set -x
+set -o errexit
+
+if [[ -z "$CI_COMMIT_TAG" ]]; then
+	TRAVIS_BRANCH="_no_sign"
+fi
+
+npm ci
+npm run dist

.gitlab-ci.yml

@@ -73,10 +73,7 @@ macOS:
     APPLE_ID: $MACOS_NOTARIZE_USERNAME
     APPLE_ID_PASSWORD: $MACOS_NOTARIZE_PASSWORD
     TEAM_SHORT_NAME: $MACOS_ASC_PROVIDER
-  script:
-    - npm ci
-    - npm run dist
-    #- ls -la dist
+  script: ./.ci/macos-build.sh
   artifacts:
     paths:
       - dist/