Faced same issue the --deep signing may not do what is expected. I found that --deep flag is depreciated and seems latest https://keith.github.io/xcode-man-pages/codesign.1.html#deep Looking forward to hear something from Apple about it.