Over on bug 1588081 we discussed possible solutions to the notarization feature on MacOS. As finally agreed on we do not actually have the time to add support for shipping PKG or DMG images to our users who would also have to change their CI pipelines to handle installing/unpacking geckodriver then.

That means we have to update our documentation and explain that the steps as already layed out are not workarounds. Also downloading the artifact via curl or wget is the proposed solution given that only web browsers add the downloaded from the internet attribute to the locally saved file.

With bug 1588081 fixed the geckodriver binary is now notarized and as long as the machine is online it will be verified. Only in case of offline usage the documented steps are necessary. Bug 1783943 has been filed for a DMG but not sure if we wanna go this route.

https://hg.mozilla.org/mozilla-central/rev/1d681983a19a