/usr/bin/productsign
productsign adds a digital signature to a product archive previously created with productbuild. If you run productsign on a product archive that was previously signed, the existing signature will be replaced.