whitelist.sh

#!/bin/bash

find "$@" -type f \( -perm -u=x -o -perm -g=x -o -perm -o=x \) -print0 | while read -d $'\0' file
do
    OUTPUT=$(santactl fileinfo "$file")

    if [[ $OUTPUT =~ (Code-signed[[:space:]]+:[[:space:]]Yes) ]]; then
        echo -n "Whitelisting $file by certificate: "
        santactl rule --whitelist --certificate --path "$file"
    else
        echo -n "Whitelisting $file: "
        santactl rule --whitelist --path "$file"
    fi
done