feat: add entitelments to signing

Certora · Dec 7, 2024 · 1a434fc · 1a434fc
1 parent 0a366c0
commit 1a434fc
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/scripts/hardened_runtime_entitlements.plist b/scripts/hardened_runtime_entitlements.plist
@@ -0,0 +1,2 @@
+<key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+<true/>
diff --git a/scripts/sign.sh b/scripts/sign.sh
@@ -22,7 +22,7 @@ for FILE_PATH in $FILES_TO_SIGN; do
     security unlock-keychain -p "$APPLE_TEMPKEYCHAIN_PASSWORD" "$APPLE_TEMPKEYCHAIN_NAME"
 
     # sign the binary
-    codesign -o runtime --force --timestamp -s "$APPLE_CODESIGN_IDENTITY" -v $FILE_PATH
+    codesign -o runtime --force --timestamp --entitlements ./scripts/hardened_runtime_entitlements.plist -s "$APPLE_CODESIGN_IDENTITY" -v $FILE_PATH
 
     # notarize binary
     ditto -c -k $FILE_PATH $FILE_NAME.zip # notarization require zip files
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		<key>com.apple.security.cs.allow-unsigned-executable-memory</key>
		<true/>