To anyone who needs to know this: if codesign is throwing the error The specified item could not be found in the keychain, but you can see the certificate that you’re trying to sign with, just check that that certificate has the associated private key as well. The “item” not found might be that.