sign_sage.py

import subprocess
import os
import sys
DEV_ID = os.environ['DEV_ID']
entitlement_file = 'entitlement.plist'
framework_path = os.path.abspath('build/Sage.framework/Versions/Current')
extra_files = []
file_args = ['codesign', '-v', '-s', DEV_ID, '--timestamp', '--options',
    'runtime', '--force', '--entitlements', entitlement_file]

if len(sys.argv) == 1 or sys.argv[1] != 'framework':
    with open('files_to_sign') as infile:
        for path in infile.readlines():
            if path.find('_tkinter.cpython') >= 0:
                continue
            signee = path.strip()
            result = subprocess.run(file_args + [signee], capture_output=True)
            if result.returncode:
                print('Failed on %s'%path)
                print(result.stderr)

    for path in extra_files:
        signee = os.path.join(framework_path, path)
        result = subprocess.run(file_args + [signee], capture_output=True)
        if result.returncode:
            print('Failed on %s'%path)
            print(result.stderr)
            
print('Signing framework ...')
subprocess.run(file_args + ['build/Sage.framework'])