diff --git a/forge.config.js b/forge.config.js
index 2702007d..b12cb5e0 100644
--- a/forge.config.js
+++ b/forge.config.js
@@ -9,6 +9,8 @@ module.exports = {
     osxSign: {}, // object must exist even if empty
     osxNotarize: {
       tool: 'notarytool',
+      hardenedRuntime: true,
+      'gatekeeper-assess': false,
       appleId: process.env.APPLE_ID,
       appleIdPassword: process.env.APPLE_PASSWORD,
       teamId: process.env.APPLE_TEAM_ID