From 85d0cac7d7e0296d38750875e33b4361bff5d5f0 Mon Sep 17 00:00:00 2001
From: Xianmo <xianmo@Xianmos-MacBook-Pro.local>
Date: Wed, 15 Apr 2026 18:28:57 +0200
Subject: [PATCH] Codesign macOS app bundle

---
 .github/workflows/build.yml          |  1 +
 src/resource/cemu.macos.entitlements | 13 +++++++++++++
 2 files changed, 14 insertions(+)
 create mode 100644 src/resource/cemu.macos.entitlements

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 31b47e55..1d9b6147 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -283,6 +283,7 @@ jobs:
         mv bin/Cemu_app/Cemu.app/Contents/MacOS/Cemu_release bin/Cemu_app/Cemu.app/Contents/MacOS/Cemu
         sed -i '' 's/Cemu_release/Cemu/g' bin/Cemu_app/Cemu.app/Contents/Info.plist
         chmod a+x bin/Cemu_app/Cemu.app/Contents/MacOS/{Cemu,update.sh}
+        codesign --entitlements ${{github.workspace}}/src/resource/cemu.macos.entitlements --force --deep --preserve-metadata=entitlements,requirements,flags,runtime --sign - --timestamp --options runtime bin/Cemu_app/Cemu.app/Contents/MacOS/Cemu
         ln -s /Applications bin/Cemu_app/Applications
         hdiutil create ./bin/tmp.dmg -ov -volname "Cemu" -fs HFS+ -srcfolder "./bin/Cemu_app"
         hdiutil convert ./bin/tmp.dmg -format UDZO -o bin/Cemu.dmg
diff --git a/src/resource/cemu.macos.entitlements b/src/resource/cemu.macos.entitlements
new file mode 100644
index 00000000..0017e1a9
--- /dev/null
+++ b/src/resource/cemu.macos.entitlements
@@ -0,0 +1,13 @@
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>com.apple.security.cs.disable-library-validation</key>
+	<true/>
+	<key>com.apple.security.get-task-allow</key>
+	<true/>
+	<key>com.apple.security.cs.allow-jit</key>
+	<true/>
+	<key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+	<true/>
+</dict>
+</plist>