From b02b82ed155c839e3dc270f95796e5c354e3bbe7 Mon Sep 17 00:00:00 2001
From: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
Date: Tue, 29 Jul 2025 18:24:27 -0300
Subject: [PATCH] ci: entitlements

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
---
 .github/entitlements.plist    | 8 ++++++++
 .github/workflows/release.yml | 2 ++
 2 files changed, 10 insertions(+)
 create mode 100644 .github/entitlements.plist

diff --git a/.github/entitlements.plist b/.github/entitlements.plist
new file mode 100644
index 0000000000000000000000000000000000000000..d6b93bc0b2d30b1ad0309edf1203b7069a934358
--- /dev/null
+++ b/.github/entitlements.plist
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+  <dict>
+    <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+    <true/>
+  </dict>
+</plist>
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 74a78e9bd844329ed08c155eacd4940e024b66f4..f439c0be9aab0f3e485e640ec13df420a0060ca2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -14,6 +14,8 @@ concurrency:
 jobs:
   goreleaser:
     uses: charmbracelet/meta/.github/workflows/goreleaser.yml@main
+    with:
+      macos_sign_entitlements: "./.github/entitlements.plist"
     secrets:
       docker_username: ${{ secrets.DOCKERHUB_USERNAME }}
       docker_token: ${{ secrets.DOCKERHUB_TOKEN }}