Macos codesign workflow

Skill a5c-ai/babysitter/library/specializations/desktop-development/skills/macos-codesign-workflow

Execute macOS code signing with Developer ID and hardened runtime requirementsFrom its SKILL.md

Install

npx -y skills add a5c-ai/babysitter --skill macos-codesign-workflow

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

SKILL.md

1.9 KB, 341 tokens by cl100k_base, as published. Nobody here has run it

macos-codesign-workflow

Execute macOS code signing with Developer ID certificates and hardened runtime. This skill handles the complete code signing process for macOS applications.

Capabilities

Sign app bundles with Developer ID
Configure hardened runtime
Sign nested frameworks and binaries
Configure entitlements
Verify signatures
Set up CI/CD signing
Handle keychain management

Input Schema

{
  "type": "object",
  "properties": {
    "appPath": { "type": "string" },
    "identity": { "type": "string" },
    "entitlements": { "type": "string" },
    "hardenedRuntime": { "type": "boolean", "default": true }
  },
  "required": ["appPath", "identity"]
}

Signing Commands

# Sign app bundle with hardened runtime
codesign --force --options runtime --timestamp \
    --entitlements MyApp.entitlements \
    --sign "Developer ID Application: Company Name (TEAMID)" \
    MyApp.app

# Sign nested components first
find MyApp.app -name "*.dylib" -o -name "*.framework" | \
    xargs -I {} codesign --force --options runtime --timestamp \
    --sign "Developer ID Application: Company Name (TEAMID)" {}

# Verify signature
codesign --verify --deep --strict --verbose=2 MyApp.app
spctl --assess --type execute --verbose MyApp.app

Related Skills

macos-notarization-workflow
macos-entitlements-generator

What ships with it: 1 file

512 B alongside SKILL.md

README.md512 B