add entitlements

.github/workflows/build.yml

@@ -121,6 +121,11 @@ jobs:
       APPLE_API_KEY_PATH: /tmp/apple_key.json
 
     steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          path: sentry-cli
+
       - name: Decode Apple signing certificate and API key
         env:
           APPLE_CERT_DATA: ${{ secrets.APPLE_CERT_DATA }}
@@ -147,7 +152,7 @@ jobs:
           input_path: sentry-cli-Darwin-${{ matrix.arch }}
           p12_file: ${{ env.APPLE_CERT_PATH }}
           p12_password: ${{ secrets.APPLE_CERT_PASSWORD }}
-          sign_args: --for-notarization
+          config_file: sentry-cli/rcodesign.toml
 
       - name: Zip signed binary
         run: |

entitlements.plist

@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+
+<!-- Entitlements for macOS -->
+
+<plist version="1.0">
+<dict>
+</dict>
+</plist>

rcodesign.toml

@@ -0,0 +1,4 @@
+[default.sign.path."*"]
+
+entitlements_xml_file = "entitlements.plist"
+code_signature_flags = ["runtime"]