forked from 1b-agent/opencadstudio-upstream
codesign -d --entitlements - on current macOS runner images prefixes the plist with text headers, so the sandbox entitlement assertion died with plistlib InvalidFileException and took the .dmg build down with it. --xml prints the bare plist on both old and new codesign builds.