# Vendored `rcodesign` (apple-codesign) Used by CI on Linux to **seal-sign** macOS artifacts produced on Linux: - Electron `.app` bundles (forge `postPackage` → `scripts/sign-macos-app.cjs`) - Bare `peardock-server` binaries (`scripts/bare-standalone.cjs` for every `darwin-*` host) so Gatekeeper does not report them as “damaged / move to Trash”. | Path | Binary | |------|--------| | `linux-x64/rcodesign` | x86_64 musl (ubuntu-latest runners) | | `linux-arm64/rcodesign` | aarch64 musl | Upstream: [indygreg/apple-platform-rs](https://github.com/indygreg/apple-platform-rs) Release tag: `apple-codesign/0.29.0` Do **not** re-download in CI — the rolling release workflow installs from these paths.