diff --git a/script/bundle-mac b/script/bundle-mac
index f85aaa892d..0b3f71505a 100755
--- a/script/bundle-mac
+++ b/script/bundle-mac
@@ -358,7 +358,7 @@ function sign_binary() {
 
     if [[ $can_code_sign = true ]]; then
         echo "Code signing executable $binary_path"
-        /usr/bin/codesign --deep --force --timestamp --options runtime --sign "$IDENTITY" "${app_path}" -v
+        /usr/bin/codesign --deep --force --timestamp --options runtime --sign "$IDENTITY" "${binary_path}" -v
     fi
 }