Package Build Script - Signed Distribution Package

gistfile1.txt

#!/bin/bash
args=("$@")
pkgName="${args[0]}"

echo "Supply the package name and version: build.sh <pkgname> <version>"
# get date for package name
myDate=`date +%Y%m%d`

# Name of the package.
NAME="${pkgName}"

# Once installed the identifier is used as the filename for a receipt files in /var/db/receipts/.
IDENTIFIER="com.omnicom.$NAME"

# Package version number.
VERSION="${args[1]}"

# Remove any unwanted .DS_Store files.
find ROOT/ -name '*.DS_Store' -type f -delete
find scripts/ -name '*.DS_Store' -type f -delete

# Build package.
/usr/bin/pkgbuild \
    --root ROOT/ \
    --scripts scripts/ \
    --identifier "$IDENTIFIER" \
    --version "$VERSION" \
    "Output/$NAME-$VERSION-$myDate.pkg"

# Build Distribution Package
/usr/bin/productbuild \
    --package "Output/$NAME-$VERSION-$myDate.pkg" \
    "Output/$NAME-$VERSION-$myDate-dist.pkg"

productsign --sign '<INSERT YOUR CERTIFICATE NAME>'  "Output/$NAME-$VERSION-$myDate-dist.pkg" "Output/$NAME-$VERSION-$myDate-dist-signed.pkg"

You need the Name of your signing certificate. You can find this by looking in Keychain Access and copying the name of the certificate. Paste that on line 30 above where it says "".