Include hardened-runtime flag during DMG signing

[ll78912]

Currently DMG files are signed without hardened-runtime which may cause apple notarization process to fail. Can this flag be added to DMG signing logic?

[RangoW]

Specify hardened-runtime only when signing .app:

relic sign -k devid -f foo-darwin-amd64 --hardened-runtime

https://github.com/sassoftware/relic/blob/master/doc/macos.md#signing-macos-binaries

[ll78912]

thanks!

[ll78912]

@RangoW : I have tried to sign .app file directly but it is not working. Should we first sign all the executables within the .app file?