Sign Apple binaries with productsign and codesign using CryptoTokenKit

--entitlements

Take the file at the given path and embed its contents in the signature as entitlement data.

--deep

Sign nested code content such as helpers, frameworks, and plug-ins.

-f

--force

Replace any existing signature if the file is already signed. Without this parameter, signing will fail if the file is already signed.

-v

--verify

Verify signature. This parameter acts as --verbose.

-v

--verbose

Sets (with a numeric value) or increments the verbosity level of output. Without the verbose parameter, no output is produced upon success. If no other options request a different action, the first -v encountered will be interpreted as --verify instead (and does not increase verbosity).

-o

--options

Specify a set of option flags to be embedded in the code signature.

Example: --options runtime