Our builds began seeing codesigning errors as of 3.5.0. Our best guess is something might have been introduced with #2438, but aren't quite sure what exactly about that change altered behavior.
security: cert import failed: UNIX[Operation not permitted]
security: problem decoding
...
File "/private/var/tmp/_bazel_buildkite/6357013eb1e6bdc4f3d11ac8e827aac3/sandbox/darwin-sandbox/20568/execroot/_main/bazel-out/darwin_arm64-opt-exec-ST-13d3ddad9198/bin/external/rules_apple~3.5.0/tools/imported_dynamic_framework_processor/imported_dynamic_framework_processor.runfiles/rules_apple~3.5.0/tools/codesigningtool/codesigningtool.py
...
subprocess.CalledProcessError: Command '['security', 'cms', '-D', '-i', 'App/Profiles/InHouse.mobileprovision']' returned non-zero exit status 1.
Our builds began seeing codesigning errors as of 3.5.0. Our best guess is something might have been introduced with #2438, but aren't quite sure what exactly about that change altered behavior.