Go to https://bitcoincore.org/en/download/.
Scroll-down a few lines, then expand "MacOS verification instructions".

Screenshot (more lines below step5):


In step8, as the recommendation stated, you can skip that and import and certify only those who you trust.