next test build

scripts/build_release.sh

@@ -21,6 +21,7 @@ xcodebuild \
   -scheme "$SCHEME" \
   -configuration Release \
   -derivedDataPath "$BUILD_DIR" \
+  CODE_SIGNING_ALLOWED=NO \
   clean build
 
 APP_PATH="$BUILD_DIR/Build/Products/Release/iKeyMon.app"
@@ -29,6 +30,20 @@ if [[ ! -d "$APP_PATH" ]]; then
   exit 1
 fi
 
+if [[ -n "${CODESIGN_IDENTITY:-}" ]]; then
+  echo "🔏 Codesigning app with identity: $CODESIGN_IDENTITY"
+  codesign \
+    --deep \
+    --force \
+    --options runtime \
+    --timestamp \
+    --entitlements "$ROOT_DIR/iKeyMon.entitlements" \
+    --sign "$CODESIGN_IDENTITY" \
+    "$APP_PATH"
+else
+  echo "⚠️ Skipping codesign (CODESIGN_IDENTITY not set)."
+fi
+
 STAGING_DIR=$(mktemp -d)
 mkdir -p "$STAGING_DIR"
 cp -R "$APP_PATH" "$STAGING_DIR/"
@@ -36,13 +51,6 @@ ln -s /Applications "$STAGING_DIR/Applications"
 mkdir -p "$STAGING_DIR/.background"
 cp "$ROOT_DIR/Assets/dmg_background.png" "$STAGING_DIR/.background/background.png"
 
-if [[ -n "${CODESIGN_IDENTITY:-}" ]]; then
-  echo "🔏 Codesigning app with identity: $CODESIGN_IDENTITY"
-  codesign --deep --force --options runtime --sign "$CODESIGN_IDENTITY" "$APP_PATH"
-else
-  echo "⚠️ Skipping codesign (CODESIGN_IDENTITY not set)."
-fi
-
 VERSION=$(xcodebuild \
   -project "$ROOT_DIR/$PROJECT" \
   -scheme "$SCHEME" \