macOS: Add missing entitlements for PCRE2 JIT

.github/workflows/release.yml

@@ -115,6 +115,9 @@ jobs:
     - name: Build signed & notorized release bundle
       run: make release RELEASE=1 STATIC=1
 
+    - name: Smoke test the codesigned release
+      run: bin/mstrap --help
+
     - name: Upload release bundle artifact
       uses: actions/upload-artifact@v3
       with:
@@ -154,6 +157,9 @@ jobs:
     - name: Build signed & notorized release bundle
       run: make release RELEASE=1 STATIC=1 TARGET_ARCH=arm64
 
+    - name: Smoke test the codesigned release
+      run: bin/mstrap --help
+
     - name: Upload release bundle artifact
       uses: actions/upload-artifact@v3
       with:

Makefile

@@ -113,6 +113,7 @@ codesign: bin/mstrap
 		codesign -f -v \
 			--timestamp \
 			--options runtime \
+			--entitlements "macos-entitlements.plist" \
 			-s "$(CODESIGN_IDENTITY)" \
 			bin/mstrap; \
 	fi

macos-entitlements.plist

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>com.apple.security.cs.allow-jit</key>
+    <true/>
+</dict>
+</plist>