macos-codesign-workflow

Execute macOS code signing with Developer ID and hardened runtime requirements

509 stars

Best use case

macos-codesign-workflow is best used when you need a repeatable AI agent workflow instead of a one-off prompt.

Execute macOS code signing with Developer ID and hardened runtime requirements

Teams using macos-codesign-workflow should expect a more consistent output, faster repeated execution, less prompt rewriting.

When to use this skill

  • You want a reusable workflow that can be run more than once with consistent structure.

When not to use this skill

  • You only need a quick one-off answer and do not need a reusable workflow.
  • You cannot install or maintain the underlying files, dependencies, or repository context.

Installation

Claude Code / Cursor / Codex

$curl -o ~/.claude/skills/macos-codesign-workflow/SKILL.md --create-dirs "https://raw.githubusercontent.com/a5c-ai/babysitter/main/library/specializations/desktop-development/skills/macos-codesign-workflow/SKILL.md"

Manual Installation

  1. Download SKILL.md from GitHub
  2. Place it in .claude/skills/macos-codesign-workflow/SKILL.md inside your project
  3. Restart your AI agent — it will auto-discover the skill

How macos-codesign-workflow Compares

Feature / Agentmacos-codesign-workflowStandard Approach
Platform SupportNot specifiedLimited / Varies
Context Awareness High Baseline
Installation ComplexityUnknownN/A

Frequently Asked Questions

What does this skill do?

Execute macOS code signing with Developer ID and hardened runtime requirements

Where can I find the source code?

You can find the source code on GitHub using the link provided at the top of the page.

Related Guides

SKILL.md Source

# macos-codesign-workflow

Execute macOS code signing with Developer ID certificates and hardened runtime. This skill handles the complete code signing process for macOS applications.

## Capabilities

- Sign app bundles with Developer ID
- Configure hardened runtime
- Sign nested frameworks and binaries
- Configure entitlements
- Verify signatures
- Set up CI/CD signing
- Handle keychain management

## Input Schema

```json
{
  "type": "object",
  "properties": {
    "appPath": { "type": "string" },
    "identity": { "type": "string" },
    "entitlements": { "type": "string" },
    "hardenedRuntime": { "type": "boolean", "default": true }
  },
  "required": ["appPath", "identity"]
}
```

## Signing Commands

```bash
# Sign app bundle with hardened runtime
codesign --force --options runtime --timestamp \
    --entitlements MyApp.entitlements \
    --sign "Developer ID Application: Company Name (TEAMID)" \
    MyApp.app

# Sign nested components first
find MyApp.app -name "*.dylib" -o -name "*.framework" | \
    xargs -I {} codesign --force --options runtime --timestamp \
    --sign "Developer ID Application: Company Name (TEAMID)" {}

# Verify signature
codesign --verify --deep --strict --verbose=2 MyApp.app
spctl --assess --type execute --verbose MyApp.app
```

## Related Skills

- `macos-notarization-workflow`
- `macos-entitlements-generator`

Related Skills

clinical-workflow-analysis

509
from a5c-ai/babysitter

Analyze clinical workflows to identify inefficiencies, bottlenecks, and improvement opportunities using Lean healthcare principles and value stream mapping techniques

osf-workflow-integrator

509
from a5c-ai/babysitter

Skill for integrating with Open Science Framework workflows

characterization-workflow-orchestrator

509
from a5c-ai/babysitter

Workflow automation skill for orchestrating multi-technique characterization sequences

snakemake-workflow-manager

509
from a5c-ai/babysitter

Snakemake workflow management skill for rule-based pipeline execution

workflow-automator

509
from a5c-ai/babysitter

Operational workflow automation skill with task sequencing, approval routing, and exception handling

onboarding-workflow

509
from a5c-ai/babysitter

Automate and manage employee onboarding workflows, checklists, and new hire integration

escalation-workflow

509
from a5c-ai/babysitter

Automated escalation path determination and workflow execution

qt-translation-workflow

509
from a5c-ai/babysitter

Set up Qt Linguist workflow with .ts files, lupdate/lrelease integration, and translation management

macos-sparkle-config

509
from a5c-ai/babysitter

Configure Sparkle framework for macOS auto-updates with appcast, delta updates, and code signing

macos-notarization-workflow

509
from a5c-ai/babysitter

Automate Apple notarization with xcrun notarytool for macOS application distribution

macos-entitlements-generator

509
from a5c-ai/babysitter

Generate entitlements.plist with appropriate sandbox capabilities for macOS applications

process-builder

509
from a5c-ai/babysitter

Scaffold new babysitter process definitions following SDK patterns, proper structure, and best practices. Guides the 3-phase workflow from research to implementation.

Workflow & Productivity