diff --git a/build.sh b/build.sh
index d7dde9a..356e8d5 100755
--- a/build.sh
+++ b/build.sh
@@ -244,12 +244,14 @@ elif [[ "$OSTYPE" == "darwin"* ]]; then
 </plist>
 EOF
 
-    find ./Heavy/bin -type f -perm +111 -exec /usr/bin/codesign --force --options runtime -s "Developer ID Application: Timothy Schoen (7SV7JPRR2L)" {} \;
-    /usr/bin/codesign --force --options runtime --entitlements entitlements.plist -s "Developer ID Application: Timothy Schoen (7SV7JPRR2L)" ./Heavy/bin/Heavy/Heavy
+    find ./Heavy -type f -perm +111 -exec file {} \; | grep "Mach-O.*executable" | cut -d: -f1 | while read f; do
+        /usr/bin/codesign --force --options runtime --entitlements entitlements.plist -s "Developer ID Application: Timothy Schoen (7SV7JPRR2L)" "$f"
+    done
+    find ./Heavy -type f \( -name "*.dylib" -o -name "*.so" \) -exec /usr/bin/codesign --force --options runtime --entitlements entitlements.plist -s "Developer ID Application: Timothy Schoen (7SV7JPRR2L)" {} \;
 
     # Submit the zipped executable for notarization
     # This makes sure we can at least run it with online notarization
-    ditto -c -k --keepParent ./Heavy/bin Heavy.zip
+    ditto -c -k --keepParent ./Heavy Heavy.zip
     xcrun notarytool store-credentials "notary_login" --apple-id ${AC_USERNAME} --password ${AC_PASSWORD} --team-id "7SV7JPRR2L"
     xcrun notarytool submit Heavy.zip --keychain-profile "notary_login" --wait
     rm Heavy.zip