---
name: code-signing-setup
description: Configure code signing for macOS and Windows binaries with notarization.
allowed-tools: Read, Write, Edit, Bash, Glob, Grep
graph:
  domains: [domain:software-engineering]
  specializations: [specialization:cli-mcp-development]
  skillAreas: [skill-area:cli-design, skill-area:mcp-server-implementation, skill-area:signature-schemes]
  roles: [role:backend-engineer, role:platform-engineer]
  workflows: [workflow:feature-development]
  topics: [topic:developer-experience, topic:hmac-signing]

---

# Code Signing Setup

Configure code signing for binaries.

## Generated Patterns

```yaml
# macOS notarization with electron-builder/notarize
notarize:
  appBundleId: com.myorg.myapp
  appleId: $APPLE_ID
  appleIdPassword: $APPLE_ID_PASSWORD
  teamId: $APPLE_TEAM_ID

# Windows signing
signtool:
  certificateFile: $CERTIFICATE_FILE
  certificatePassword: $CERTIFICATE_PASSWORD
  timestampServer: http://timestamp.digicert.com
```

## Target Processes

- cli-binary-distribution
- package-manager-publishing