From 29ea0f96bd2ed904bd68ab8d457b4e355e367caf Mon Sep 17 00:00:00 2001
From: Jan Kratochvil <kratochvil.jan@outlook.com>
Date: Thu, 9 Apr 2026 13:22:04 +0200
Subject: [PATCH] Signs moved binaries on Mac to make system not kill them

---
 eng/BootStrapMsBuild.targets | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/eng/BootStrapMsBuild.targets b/eng/BootStrapMsBuild.targets
index b52010c3ca4..3fc5328a1e5 100644
--- a/eng/BootStrapMsBuild.targets
+++ b/eng/BootStrapMsBuild.targets
@@ -258,6 +258,11 @@
     <Copy SourceFiles="@(FreshlyBuiltNetBinaries)"
           DestinationFiles="@(FreshlyBuiltNetBinaries->'$(InstallDir)sdk\$(BootstrapSdkVersion)\%(RecursiveDir)%(Filename)%(Extension)')" />
 
+    <!-- macOS Gatekeeper kills copied dotnet apphosts that lack a valid local signature.
+         Ad-hoc re-sign to prevent SIGKILL (exit code 137) when tests invoke the bootstrap dotnet. -->
+    <Exec Command="codesign --force --sign - &quot;$(InstallDir)dotnet&quot;"
+          Condition="$([MSBuild]::IsOSPlatform('osx'))" />
+
   </Target>
 
 </Project>