Fix DockTilePlugin codesigning by adding hardened runtime flag

.github/workflows/mac-dmg-x64.yml

@@ -201,7 +201,7 @@ jobs:
           find Cryptomator.app/Contents/runtime/Contents/Home/lib/ -name '*.dylib' -exec codesign --force -s ${CODESIGN_IDENTITY} {} \;
           find Cryptomator.app/Contents/runtime/Contents/Home/lib/ \( -name 'jspawnhelper' -o -name 'pauseengine' -o -name 'simengine' \) -exec codesign --force -o runtime -s ${CODESIGN_IDENTITY} {} \;
           echo "Codesigning dock tile plugin..."
-          codesign --force --deep -s ${CODESIGN_IDENTITY} Cryptomator.app/Contents/PlugIns/Cryptomator.docktileplugin
+          codesign --force -o runtime -s ${CODESIGN_IDENTITY} Cryptomator.app/Contents/PlugIns/Cryptomator.docktileplugin/Contents/MacOS/Cryptomator
           echo "Codesigning jar contents..."
           find Cryptomator.app/Contents/runtime/Contents/MacOS -name '*.dylib' -exec codesign --force -s ${CODESIGN_IDENTITY} {} \;
           for JAR_PATH in `find Cryptomator.app -name "*.jar"`; do

.github/workflows/mac-dmg.yml

@@ -200,7 +200,7 @@ jobs:
           find Cryptomator.app/Contents/runtime/Contents/Home/lib/ -name '*.dylib' -exec codesign --force -s ${CODESIGN_IDENTITY} {} \;
           find Cryptomator.app/Contents/runtime/Contents/Home/lib/ \( -name 'jspawnhelper' -o -name 'pauseengine' -o -name 'simengine' \) -exec codesign --force -o runtime -s ${CODESIGN_IDENTITY} {} \;
           echo "Codesigning dock tile plugin..."
-          codesign --force --deep -s ${CODESIGN_IDENTITY} Cryptomator.app/Contents/PlugIns/Cryptomator.docktileplugin
+          codesign --force -o runtime -s ${CODESIGN_IDENTITY} Cryptomator.app/Contents/PlugIns/Cryptomator.docktileplugin/Contents/MacOS/Cryptomator
           echo "Codesigning jar contents..."
           find Cryptomator.app/Contents/runtime/Contents/MacOS -name '*.dylib' -exec codesign --force -s ${CODESIGN_IDENTITY} {} \;
           for JAR_PATH in `find Cryptomator.app -name "*.jar"`; do

dist/mac/dmg/build.sh

@@ -162,7 +162,7 @@ if [ -n "${CODESIGN_IDENTITY}" ] && [ -n "${TEAM_IDENTIFIER}" ]; then
     find ${APP_NAME}.app/Contents/runtime/Contents/Home/lib/ -name '*.dylib' -exec codesign --force -s ${CODESIGN_IDENTITY} {} \;
     find ${APP_NAME}.app/Contents/runtime/Contents/Home/lib/ -name 'jspawnhelper' -exec codesign --force -o runtime -s ${CODESIGN_IDENTITY} {} \;
     echo "Codesigning dock tile plugin..."
-    codesign --force --deep -s ${CODESIGN_IDENTITY} ${APP_NAME}.app/Contents/PlugIns/Cryptomator.docktileplugin
+    codesign --force -o runtime -s ${CODESIGN_IDENTITY} ${APP_NAME}.app/Contents/PlugIns/Cryptomator.docktileplugin/Contents/MacOS/Cryptomator
     echo "Codesigning jar contents..."
     find ${APP_NAME}.app/Contents/runtime/Contents/MacOS -name '*.dylib' -exec codesign --force -s ${CODESIGN_IDENTITY} {} \;
     for JAR_PATH in `find ${APP_NAME}.app -name "*.jar"`; do