stado product signing sign
Invocation
stado product signing sign [OPTIONS] <--product <product>|--identifier <identifier>> <PATH>...Purpose
Sign staged code and atomically replace only verified targets
Required inputs and options
| Input or option | Contract |
|---|---|
--catalog <catalog> | Independent authoritative catalog path |
--product <product> | Product whose stable code identity is preserved |
--identifier <identifier> | Exact identifier for one signing target |
--workspace <workspace> | The workspace of canonical checkouts this operation reads and builds from; default WISENT_WORKSPACE, else ~/Documents/CodingProjects/Wisent |
--identity <identity> | Exact available Apple signing certificate name or fingerprint |
--previous <previous> | Preceding stable installation whose requirement must remain satisfied |
--entitlements <entitlements> | Exact entitlement plist for the selected target; nested code retains its own policy |
--boolean-entitlement <boolean-entitlement> | Merge NAME=true or NAME=false into each target's entitlements; repeatable |
--hardened-runtime | Select the hardened runtime signing option |
--json | Print the resulting signatures |
Output and state effect
It performs the operation described above and emits its operator result on standard output or standard error. Any state change is limited to the resources and records named by the purpose and options on this page.
Refusals
- Preceding stable installation whose requirement must remain satisfied
- Before dispatch, Stado refuses a missing required token shown in the invocation, an unknown option, or a value outside a listed value set; argument-usage failures exit with code 2.