enable hardened runtime for macOS builds

Christopher Willis-Ford · Christopher Willis-Ford · commit 6a33d411c13f · 2020-01-16T12:36:03.000-08:00
diff --git a/buildResources/entitlements.inherit.plist b/buildResources/entitlements.inherit.plist
@@ -4,6 +4,8 @@
 <dict>
 <key>com.apple.security.app-sandbox</key>
 <true/>
+<key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+<true/>
 <key>com.apple.security.inherit</key>
 <true/>
 </dict>
diff --git a/buildResources/entitlements.plist b/buildResources/entitlements.plist
@@ -4,6 +4,8 @@
 <dict>
 <key>com.apple.security.app-sandbox</key>
 <true/>
+<key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+<true/>
 <key>com.apple.security.device.audio-input</key>
 <true/>
 <key>com.apple.security.device.camera</key>
diff --git a/electron-builder.yaml b/electron-builder.yaml
@@ -5,6 +5,7 @@ appId: edu.mit.scratch.scratch-desktop
 productName: "Scratch Desktop"
 mac:
   category: public.app-category.education
+  hardenedRuntime: true
   icon: buildResources/ScratchDesktop.icns
   provisioningProfile: embedded.provisionprofile
   target:
