diff --git a/signAndDeploy.sh b/signAndDeploy.sh
new file mode 100755
index 0000000000000000000000000000000000000000..667a91467f257a005487bf24de080ef7ff9a9fef
--- /dev/null
+++ b/signAndDeploy.sh
@@ -0,0 +1,25 @@
+#!/bin/bash
+
+echo ""
+cd build-local
+macdeployqt ./Ring.app
+echo "cloning certificates"
+git clone $CERTIFICATES_REPOSITORY
+echo "prepare keychain"
+security create-keychain -p $KEYCHAIN_PASSWORD $KEYCHAIN_NAME
+security unlock-keychain -p $KEYCHAIN_PASSWORD $KEYCHAIN_NAME
+security list-keychains -s $KEYCHAIN_NAME
+security set-key-partition-list -S apple-tool:,apple:,productbuild: -s -k $KEYCHAIN_PASSWORD $KEYCHAIN_NAME
+echo "import certificates"
+security import certificates/certificates/distribution/Certificates.p12 -k $KEYCHAIN_PATH -P $CERTIFICATES_PASSWORD -T /usr/bin/codesign -T /usr/bin/productbuild
+DELIVER_PASSWORD=$APPLE_PASSWORD fastlane sigh --app_identifier $BUNDLE_ID --username $APPLE_ACCOUNT --readonly true --platform macos --team_id $TEAM_ID
+security set-key-partition-list -S apple-tool:,apple:,productbuild: -s -k $KEYCHAIN_PASSWORD $KEYCHAIN_NAME
+echo "start signing"
+codesign --deep --force --verbose --sign "${APP_CERTIFICATE}" --entitlements ../data/Ring.entitlements Ring.app
+codesign --verify --verbose Ring.app
+echo "create .pkg"
+productbuild --component Ring.app/ /Applications --sign "${INSTALLER_CERTIFICATE}" --product Ring.app/Contents/Info.plist Ring.pkg
+pkgutil --check-signature Ring.pkg
+/Applications/Xcode.app/Contents/Applications/Application\ Loader.app/Contents/Frameworks/ITunesSoftwareService.framework/Support/altool  --validate-app  --type osx -f Ring.pkg -u $APPLE_ACCOUNT --password $APPLE_PASSWORD
+echo "start deploying"
+/Applications/Xcode.app/Contents/Applications/Application\ Loader.app/Contents/Frameworks/ITunesSoftwareService.framework/Support/altool  --upload-app  --type osx -f Ring.pkg -u $APPLE_ACCOUNT --password $APPLE_PASSWORD