fix missing entitlement for signing

Author: pchalamet

.github/workflows/on-push-tag.yml

@@ -41,6 +41,7 @@ jobs:
           (cd .out/windows/arm64; zip ../../fscript-${BUILD_VERSION}-windows-arm64.zip ./*)
           (cd .out/linux/x64; zip ../../fscript-${BUILD_VERSION}-linux-x64.zip ./*)
           (cd .out/linux/arm64; zip ../../fscript-${BUILD_VERSION}-linux-arm64.zip ./*)
+          cp entitlements.plist .out/darwin/entitlements.plist
           (cd .out/darwin; zip -r ../fscript-${BUILD_VERSION}-darwin-unsigned.zip ./*)
 
       - name: Extract version suffix

.github/workflows/on-release-published.yml

@@ -44,6 +44,7 @@ jobs:
         run: |
           mkdir -p .out/darwin
           unzip -d .out/darwin fscript-${{ github.ref_name }}-darwin-unsigned.zip
+          test -f .out/darwin/entitlements.plist
 
       - name: Add cert to keychain
         uses: apple-actions/import-codesign-certs@v3
@@ -53,8 +54,8 @@ jobs:
 
       - name: Sign binaries
         run: |
-          codesign --force --timestamp --sign "Developer ID Application: Magnus Opera (${{ secrets.MAC_DEV_TEAM_ID }})" .out/darwin/arm64/fscript --options=runtime --no-strict --entitlements entitlements.plist --identifier "${{ secrets.MAC_CERT_BUNDLE_ID }}.arm64"
-          codesign --force --timestamp --sign "Developer ID Application: Magnus Opera (${{ secrets.MAC_DEV_TEAM_ID }})" .out/darwin/x64/fscript --options=runtime --no-strict --entitlements entitlements.plist --identifier "${{ secrets.MAC_CERT_BUNDLE_ID }}.x64"
+          codesign --force --timestamp --sign "Developer ID Application: Magnus Opera (${{ secrets.MAC_DEV_TEAM_ID }})" .out/darwin/arm64/fscript --options=runtime --no-strict --entitlements .out/darwin/entitlements.plist --identifier "${{ secrets.MAC_CERT_BUNDLE_ID }}.arm64"
+          codesign --force --timestamp --sign "Developer ID Application: Magnus Opera (${{ secrets.MAC_DEV_TEAM_ID }})" .out/darwin/x64/fscript --options=runtime --no-strict --entitlements .out/darwin/entitlements.plist --identifier "${{ secrets.MAC_CERT_BUNDLE_ID }}.x64"
           (cd .out/darwin/arm64; zip ../fscript-${{ github.ref_name }}-darwin-arm64.zip ./*)
           (cd .out/darwin/x64; zip ../fscript-${{ github.ref_name }}-darwin-x64.zip ./*)