diff --git a/scripts/appveyor/after_build.sh b/scripts/appveyor/after_build.sh
index 1934da64..5f9f5d72 100755
--- a/scripts/appveyor/after_build.sh
+++ b/scripts/appveyor/after_build.sh
@@ -10,20 +10,28 @@ else
   # unlock the keychain
   security unlock-keychain -p dummypasswd build.keychain
   # code-sign VST3 and dylibs
-  codesign --sign "${CODESIGN_IDENTITY}" --deep --keychain build.keychain --verbose \
+  codesign --sign "${CODESIGN_IDENTITY}" --deep --keychain build.keychain --force --verbose \
            "${INSTALL_DIR}"/Library/Audio/Plug-Ins/VST3/sfizz.vst3
   # code-sign AudioUnit and dylibs
-  codesign --sign "${CODESIGN_IDENTITY}" --deep --keychain build.keychain --verbose \
+  codesign --sign "${CODESIGN_IDENTITY}" --deep --keychain build.keychain --force --verbose \
            "${INSTALL_DIR}"/Library/Audio/Plug-Ins/Components/sfizz.component
-  codesign --sign "${CODESIGN_IDENTITY}" --deep --keychain build.keychain --verbose \
+  codesign --sign "${CODESIGN_IDENTITY}" --deep --keychain build.keychain --force --verbose \
            "${INSTALL_DIR}"/Library/Audio/Plug-Ins/Components/sfizz.component/Contents/Resources/plugin.vst3
   # code-sign LV2 and dylibs (note: manual, LV2 are not real bundles)
-  codesign --sign "${CODESIGN_IDENTITY}" --keychain build.keychain --verbose \
+  codesign --sign "${CODESIGN_IDENTITY}" --keychain build.keychain --force --verbose \
            "${INSTALL_DIR}"/Library/Audio/Plug-Ins/LV2/sfizz.lv2/Contents/Binary/*.so
   if ls "${INSTALL_DIR}"/Library/Audio/Plug-Ins/LV2/sfizz.lv2/Contents/Frameworks/*.dylib &> /dev/null; then
-    codesign --sign "${CODESIGN_IDENTITY}" --keychain build.keychain --verbose \
+    codesign --sign "${CODESIGN_IDENTITY}" --keychain build.keychain --force --verbose \
              "${INSTALL_DIR}"/Library/Audio/Plug-Ins/LV2/sfizz.lv2/Contents/Frameworks/*.dylib
   fi
+  if ls "${INSTALL_DIR}"/usr/local/bin/* &> /dev/null; then
+    codesign --sign "${CODESIGN_IDENTITY}" --keychain build.keychain --force --verbose \
+      "${INSTALL_DIR}"/usr/local/bin/*
+  fi
+  if ls "${INSTALL_DIR}"/usr/local/lib/*.dylib &> /dev/null; then
+    codesign --sign "${CODESIGN_IDENTITY}" --keychain build.keychain --force --verbose \
+      "${INSTALL_DIR}"/usr/local/lib/*.dylib
+  fi
 fi
 
 tar -zcvf "${INSTALL_DIR}.tar.gz" ${INSTALL_DIR}