diff --git a/buildResources/entitlements.inherit.plist b/buildResources/entitlements.inherit.plist
index 8c3993f..a7a925c 100644
--- a/buildResources/entitlements.inherit.plist
+++ b/buildResources/entitlements.inherit.plist
@@ -4,6 +4,8 @@
com.apple.security.app-sandbox
+com.apple.security.cs.allow-unsigned-executable-memory
+
com.apple.security.inherit
diff --git a/buildResources/entitlements.plist b/buildResources/entitlements.plist
index 53effcb..44d4e94 100644
--- a/buildResources/entitlements.plist
+++ b/buildResources/entitlements.plist
@@ -4,6 +4,8 @@
com.apple.security.app-sandbox
+com.apple.security.cs.allow-unsigned-executable-memory
+
com.apple.security.device.audio-input
com.apple.security.device.camera
diff --git a/electron-builder.yaml b/electron-builder.yaml
index aaf7c39..999668a 100644
--- a/electron-builder.yaml
+++ b/electron-builder.yaml
@@ -5,6 +5,7 @@ appId: edu.mit.scratch.scratch-desktop
productName: "Scratch Desktop"
mac:
category: public.app-category.education
+ hardenedRuntime: true
icon: buildResources/ScratchDesktop.icns
provisioningProfile: embedded.provisionprofile
target: