{ substituteAll
, callPackage
}:
let
  sigtool = callPackage ./sigtool.nix {};

in substituteAll {
  src = ./sign-apphost.proj;
  codesign = "${sigtool}/bin/codesign";
}