Document --run/-R flag

Author: radare

README.md

@@ -78,6 +78,7 @@ Usage:
   -K, --add-access-group [NAME] Add $(TeamIdentifier).NAME to keychain-access-groups
   -L, --identities              List local codesign identities
   -m, --mobileprovision [FILE]  Specify the mobileprovision file to use
+  -R, --run [SCRIPT]            Run a hook script before signing starts
   -s, --single                  Sign a single file instead of an IPA
   -S, --self-sign-provision     Self-sign mobile provisioning (EXPERIMENTAL)
   -v, --verify                  Verify all the signed files at the end
@@ -164,6 +165,20 @@ creates a dependency list of all the bins and signs them in order. The parallel
 signing aims to run in parallel as much tasks as possible without breaking the
 dependency list.
 
+## Run hooks
+
+Use `-R, --run` to execute a script before signing starts.
+
+Shell scripts receive the following environment variables:
+
+- `APPLESIGN_DIRECTORY`
+- `APPLESIGN_MAINBIN`
+- `APPLESIGN_OUTFILE`
+- `APPLESIGN_TEMPDIR`
+- `APPLESIGN_FILE`
+
+`APPLESIGN_TEMPDIR` is the temporary working directory.
+
 ## Mangling
 
 It is possible with `--force-family` to remove the UISupportedDevices from the

lib/config.ts

@@ -20,6 +20,7 @@ const shortHelpMessage = `Usage:
   -m, --mobileprovision [FILE]  Specify the mobileprovision file to use
   -o, --output [APP.IPA]        Path to the output IPA filename
   -O, --osversion 9.0           Force specific OSVersion if any in Info.plist
+  -R, --run [SCRIPT]            Run a hook script before signing starts
   -T, --tempdir [DIR]           Path to the output directory for temporary files
   -p, --without-plugins         Remove plugins (excluding XCTests) from the resigned IPA
   -w, --without-watchapp        Remove the WatchApp from the IPA before resigning
@@ -64,6 +65,7 @@ const helpMessage = `Usage:
   -K, --add-access-group [NAME] Add $(TeamIdentifier).NAME to keychain-access-groups
   -L, --identities              List local codesign identities
   -m, --mobileprovision [FILE]  Specify the mobileprovision file to use
+  -R, --run [SCRIPT]            Run a hook script before signing starts
   -s, --single                  Sign a single file instead of an IPA
   -S, --self-sign-provision     Self-sign mobile provisioning (EXPERIMENTAL)
   -v, --verify                  Verify all the signed files at the end