Incoming network connections firewall permission prompts on every launch about ungoogled-chromium-macos HOT 3 CLOSED

What key will this use to sign? Is there a way to do this without sudo?

from ungoogled-chromium-macos.

In the above command - refers Ad-hoc signing. As per man

Ad-hoc signing does not use an identity at all, and identifies exactly
one instance of code. Significant restrictions apply to the use of ad-hoc
signed code; consult documentation before using this.

codesign will attempt to embed the entire certificate chain documenting
the signing identity in the code signature it generates, including any
intermediate certificates and the anchor certificate.

Looks like we can use below two commands instead of sudo.

clears extended file attributes of app bundle and its internal files
xattr -cr out/Default/Chromium.app

apply ad-hoc signing to all files and folders in app bundle.
codesign --force --deep --sign - out/Default/Chromium.app

from ungoogled-chromium-macos.

When building,
xattr -cr out/Default/Chromium.app
output:
xattr: No such file: out/Default/Chromium.app/Contents/Frameworks/Chromium Framework.framework/Libraries
The "Libraries" is a symbolic link to "Versions/Current/Libraries", so xattr needs the -s switch to avoid this error.
xattr -csr out/Default/Chromium.app

from ungoogled-chromium-macos.