`make list_toolchain_updates-firefox-macos` could check if the macos entitilments files we use for signing have changed
The entitlements files we use for signing Tor and Mullvad browsers are stored in tor-browser-build.git/tools/signing/macos-entitlements
, and have been copied from tor-browser.git/security/mac/hardenedruntime/production
.
The list of files being signed by each entitlements files is stored in tor-browser.git/taskcluster/config.yml
, in mac-signing
. While we do that in tor-browser-build.git/tools/signing/wrappers/sign-rcodesign-128
.
The make list_toolchain_updates-firefox-macos
command could check if the entitlements files and the list of files being signed by each one has been changed upstream.