diff --git a/.github/workflows/desktop-build.yml b/.github/workflows/desktop-build.yml
index 2645304e5..21c625cf0 100644
--- a/.github/workflows/desktop-build.yml
+++ b/.github/workflows/desktop-build.yml
@@ -285,7 +285,7 @@ jobs:
           MACOS_CI_KEYCHAIN_PWD: ${{ secrets.PROD_MACOS_CI_KEYCHAIN_PWD }}
         run: |
           security unlock-keychain -p "$MACOS_CI_KEYCHAIN_PWD" build.keychain
-          /usr/bin/codesign --sign="$MACOS_CERTIFICATE_NAME" --entitlements="../../.ci/macos.entitlements" --options=runtime --force --deep --timestamp --verbose ${{steps.build.outputs.path}}
+          /usr/bin/codesign --sign="$MACOS_CERTIFICATE_NAME" --entitlements=".ci/macos.entitlements" --options=runtime --force --deep --timestamp --verbose ${{steps.build.outputs.path}}
 
       - name: Notarize app bundle
         env:
diff --git a/cmake/SignMacApplications.cmake b/cmake/SignMacApplications.cmake
index e6bbd39be..9835a4044 100644
--- a/cmake/SignMacApplications.cmake
+++ b/cmake/SignMacApplications.cmake
@@ -19,9 +19,9 @@ if(APPLE)
             execute_process(COMMAND
                     "codesign"
                     "--sign"
-                    "$ENV{MACOS_CERTIFICATE}"
+                    "$ENV{MACOS_CERTIFICATE_NAME}"
                     "--entitlements"
-                    "../.ci/macos.entitlements"
+                    ".ci/macos.entitlements"
                     "--options"
                     "runtime"
                     "--force"
@@ -35,11 +35,11 @@ if(APPLE)
         execute_process(COMMAND
                 "codesign"
                 "--sign"
-                "$ENV{MACOS_CERTIFICATE}"
+                "$ENV{MACOS_CERTIFICATE_NAME}"
                 "--entitlements"
-                    "../.ci/macos.entitlements"
+                ".ci/macos.entitlements"
                 "--options"
-                    "runtime"
+                "runtime"
                 "--force"
                 "--deep"
                 "--timestamp"