diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 445599a8f..fc9248bbb 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -52,3 +52,6 @@ jobs:
           # If the commit is tagged with a version (e.g. "v1.0.0"),
           # release the app after building
           release: ${{ startsWith(github.ref, 'refs/tags/v') }}
+
+          mac_certs: ${{ secrets.mac_certs }}
+          mac_certs_password: ${{ secrets.mac_certs_password }}
diff --git a/build/entitlements.mac.plist b/build/entitlements.mac.plist
index 38c887b21..55f37a696 100644
--- a/build/entitlements.mac.plist
+++ b/build/entitlements.mac.plist
@@ -6,7 +6,5 @@
     <true/>
     <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
     <true/>
-    <key>com.apple.security.cs.allow-dyld-environment-variables</key>
-    <true/>
   </dict>
 </plist>
diff --git a/electron-builder.yml b/electron-builder.yml
index 25e0f6fc3..3bf6f5f3f 100644
--- a/electron-builder.yml
+++ b/electron-builder.yml
@@ -36,6 +36,7 @@ nsis:
   uninstallDisplayName: ${productName}
   createDesktopShortcut: always
 mac:
+  entitlements: build/entitlements.mac.plist
   entitlementsInherit: build/entitlements.mac.plist
   extendInfo:
     - NSCameraUsageDescription: Application requests access to the device's camera.
@@ -44,6 +45,8 @@ mac:
     - NSDownloadsFolderUsageDescription: Application requests access to the user's Downloads folder.
   notarize: false
   icon: resources/icon.icns
+  hardenedRuntime: true
+  gatekeeperAssess: false
 dmg:
   artifactName: ${name}-${version}.${ext}
 linux: