pkgs/os-specific/darwin/signing-utils/post-link-sign-hook.nix

   1 { writeTextFile, cctools, sigtool }:
   2
   3 writeTextFile {
   4   name = "post-link-sign-hook";
   5   executable = true;
   6
   7   text = ''
   8     if [ "$linkerOutput" != "/dev/null" ]; then
   9       CODESIGN_ALLOCATE=${cctools}/bin/${cctools.targetPrefix}codesign_allocate \
  10         ${sigtool}/bin/codesign -f -s - "$linkerOutput"
  11     fi
  12   '';
  13 }