diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 1efb2a85df..c198a04ec0 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -420,7 +420,7 @@ jobs:
         run: |
           # create variables
           CERTIFICATE_PATH=$RUNNER_TEMP/build_certificate.p12
-          PP_PATH=$RUNNER_TEMP/build_pp.mobileprovision
+          PP_PATH=$RUNNER_TEMP/build_pp.provisionprofile
           KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain-db
 
           # import certificate and provisioning profile from secrets
diff --git a/metainfo.xml b/metainfo.xml
index 948413f9bd..aa326b972f 100644
--- a/metainfo.xml
+++ b/metainfo.xml
@@ -107,6 +107,7 @@
     <release version="0.4.4" urgency="medium" type="development">
       <description>
         <ul>
+          <li>macOS package signing is now done with a valid Apple ID</li>
           <li>macOS package is now Apple Silicon native</li>
           <li>Add CoreText font fallback implementation for macOS (#1533)</li>
           <li>Add Ubuntu-24.04 in github actions (#1460)</li>
diff --git a/src/contour/CMakeLists.txt b/src/contour/CMakeLists.txt
index 86c8e61fab..b427b89683 100644
--- a/src/contour/CMakeLists.txt
+++ b/src/contour/CMakeLists.txt
@@ -453,6 +453,7 @@ elseif(APPLE)
 
     # Install application icon
     install(FILES "res/images/contour-logo.icns" DESTINATION "${INSTALL_CMAKE_DIR}" RENAME "contour.icns")
+    install(FILES "res/entitlements.plist" DESTINATION "${App_Contents}")
     install(DIRECTORY "${terminfo_basedir}" DESTINATION "${INSTALL_CMAKE_DIR}")
     install(DIRECTORY "shell-integration" DESTINATION "${INSTALL_CMAKE_DIR}")
 
diff --git a/src/contour/res/entitlements.plist b/src/contour/res/entitlements.plist
new file mode 100644
index 0000000000..73d41299f1
--- /dev/null
+++ b/src/contour/res/entitlements.plist
@@ -0,0 +1,10 @@
+<!--?xml version="1.0" encoding="UTF-8"?-->
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+    <dict>
+        <key>com.apple.application-identifier</key>
+        <string>org.contourterminal.Terminal</string>
+        <key>com.apple.developer.team-identifier</key>
+        <string>6T525MU9UR</string>
+    </dict>
+</plist>