diff --git a/osx/createbundle.sh b/osx/createbundle.sh
index 8c1fcf60d..3454f6645 100755
--- a/osx/createbundle.sh
+++ b/osx/createbundle.sh
@@ -135,7 +135,7 @@ done
 
 for app in "AsebaStudio" "AsebaPlayground" "ThymioVPLClassic"
 do
-    echo "Signing $APPS_DIR/$app.app/ with $DIR/inherited.entitlements"
+    echo "Signing $APPS_DIR/$app.app/"
 	
 	for fw in $(ls "$APPS_DIR/$app.app/Contents/Frameworks")
 		do
@@ -152,6 +152,25 @@ do
     sign --options=runtime $(realpath "$APPS_DIR/$app.app/")
 done
 
+for app in "Thonny"
+do
+    echo "Signing $APPS_DIR/$app.app/"
+    
+    for fw in $(ls "$APPS_DIR/$app.app/Contents/Frameworks")
+        do
+            echo "Signing $DEST/Contents/Frameworks/$fw"
+            sign $(realpath "$APPS_DIR/$app.app/Contents/Frameworks/$fw")
+        done
+
+    for py in $(find $APPS_DIR/$app.app/Contents/MacOS -name '*.py')
+        do
+            echo "Signing $py"
+            sign $(realpath "$py")
+        done
+    
+    sign --options=runtime $(realpath "$APPS_DIR/$app.app/")
+done
+
 echo "Signing $DEST/Contents/Frameworks/QTWebEngineCore.framework/Versions/5/Helpers/QtWebEngineProcess.app"
 sign --options=runtime --entitlements "$DIR/QtWebEngineProcess.entitlements" $(realpath $DEST/Contents/Frameworks/QtWebEngineCore.framework/Versions/Current/Helpers/QtWebEngineProcess.app)
 
@@ -192,4 +211,4 @@ if [ -n "$DMG" ]; then
     "$DMG_DIR/ThymioSuite.app"
 
     sign -f "$1"
-fi
\ No newline at end of file
+fi