Update install-os-x.md with Catalina download workaround instructions.

This is a workaround for the app notarization requirements in Catalina until
we have a new release workflow in place. Note that at least on MacOS 10.15.2,
the notarization warning is triggered while running the installer script if
the script was downloaded using the browser. See  #9304 and #10777.

RELNOTES: None.

Closes #10787.

PiperOrigin-RevId: 295209957
diff --git a/site/docs/install-os-x.md b/site/docs/install-os-x.md
index a03ba07..2150892 100644
--- a/site/docs/install-os-x.md
+++ b/site/docs/install-os-x.md
@@ -42,6 +42,17 @@
 
 Next, download the Bazel binary installer named `bazel-<version>-installer-darwin-x86_64.sh` from the [Bazel releases page on GitHub](https://github.com/bazelbuild/bazel/releases).
 
+Note: **on MacOS Catalina**, due to Apple's new app notarization requirements,
+you will need to download the installer using from the terminal using `curl`:
+
+```
+# Replace <version> as appropriate.
+curl -LO https://github.com/bazelbuild/bazel/releases/download/<version>/bazel-<version>-installer-darwin-x86_64.sh
+```
+
+This is a temporary workaround until we fix notarization in our MacOS release
+workflow ([#9304](https://github.com/bazelbuild/bazel/issues/9304)).
+
 ### Step 3: Run the installer
 
 Run the Bazel installer as follows:
@@ -55,6 +66,10 @@
 sets the `.bazelrc` path to `$HOME/.bazelrc`. Use the `--help` command to see
 additional installation options.
 
+If you are **on MacOS Catalina** and get an error that _**“bazel-real” cannot be
+opened because the developer cannot be verified**_, you will need to re-download
+the installer from the terminal using `curl` as a workaround; see Step 2 above.
+
 ### Step 4: Set up your environment
 
 If you ran the Bazel installer with the `--user` flag as above, the Bazel