review feedback

README.md

@@ -226,8 +226,8 @@ Default to `undefined`.
 
 *** To be deprecated, see `signature-flags` *** Restrict dyld loading. See doc about this [code signature flag](https://developer.apple.com/documentation/security/seccodesignatureflags/kseccodesignaturerestrict?language=objc) for more details. Disabled by default.
 
-`signature-flags` - *String*
-comma separated string for [code signature flag](https://developer.apple.com/documentation/security/seccodesignatureflags?language=objc). Default is `underfined`
+`signature-flags` - *String|String[]*
+comma separated string or array for [code signature flag](https://developer.apple.com/documentation/security/seccodesignatureflags?language=objc). Default is `undefined`
 
 `strict-verify` - *Boolean|String|Array.<String>*
 

bin/electron-osx-sign-usage.txt

@@ -67,7 +67,7 @@ DESCRIPTION
     Flag to enable restrict mode. Disabled by default. (this will be deprecated soon, see --sign-flags)
 
   --signature-flags=flags
-    code signature flags. Default to none
+    Code signature flags. Default to none.
 
   --strict-verify, --strict-verify=options, --no-strict-verify
     Flag to enable/disable ``--strict'' flag when verifying the signed application bundle.

sign.js

@@ -158,16 +158,20 @@ function signApplicationAsync (opts) {
       } else {
         args.push('--timestamp')
       }
-      var optionsArguments = []
+      let optionsArguments = []
 
       if (opts['signature-flags']) {
-        var flags = opts['signature-flags'].split(',').map(function (flag) { return flag.trim() })
-        flags.forEach(element => {
-          optionsArguments.push(element)
-        })
+        if (Array.isArray(opts['signature-flags'])) {
+          optionsArguments = [...opts['signature-flags']]
+        } else {
+          const flags = opts['signature-flags'].split(',').map(function (flag) { return flag.trim() })
+          flags.forEach(element => {
+            optionsArguments.push(element)
+          })
+        }
       }
 
-      if (opts.hardenedRuntime || opts['hardened-runtime' || optionsArguments.includes('runtime')]) {
+      if (opts.hardenedRuntime || opts['hardened-runtime'] || optionsArguments.includes('runtime')) {
         // Hardened runtime since darwin 17.7.0 --> macOS 10.13.6
         if (compareVersion(osRelease, '17.7.0') >= 0) {
           optionsArguments.push('runtime')