Sign Mac OS X app for production.

signApp.js

import { sign, flat } from 'electron-osx-sign';
import { PARENT_PLIST_PATH, CHILD_PLIST_PATH, PROVISIONING_PROFILE } from './config';

const signApp = (appPath, pkgPath) => {
    const resourcesPath = path.join(appPath, './Contents/Resources/');
    const signOpts = {
        app: appPath,
        platform: 'mas',
        binaries: [ /* Here goes the list of binaries you have in your app, like the widevine plugin. */ ],
        entitlements: PARENT_PLIST_PATH,
        'entitlements-inherit': CHILD_PLIST_PATH,
        'provisioning-profile': PROVISIONING_PROFILE,
        identity: '3rd Party Mac Developer Application: Yoann MOINET (REDACTED)',
        type: 'distribution',
    };

    const flatOpts = {
        app: appPath,
        identity: '3rd Party Mac Developer Installer: Yoann MOINET (REDACTED)',
        platform: 'mas',
        pkg: pkgPath
    };

    sign(signOpts);
    flat(flatOpts);
};