search

achow101 / signapple

MIT License
39 stars 10 forks source link

hardened runtime? #3

Closed tofutim closed 2 years ago

tofutim commented 2 years ago

Is it possible to use this to sign with hardened runtime? (--options=runtime)

achow101 commented 2 years ago

I do not normally work on Mac applications, so I do not know, but I would guess that this cannot do that. From the docs, it seems that hardened runtime is something set in an entitlement, and currently this project cannot set entitlements. However the code for signing entitlements is there, just not any way to set entitlements.

tofutim commented 2 years ago

Thanks for the response. I am investigating how to notarize a mac app, and it seems that one has to use Apple's codesign to set --options=runtime. But maybe there is a way to do it with signapple so that my detached-sig-create.sh doesn't have to switch from signapple to codesign.

achow101 commented 2 years ago

I've added an option that enables hardened runtime when signing.