diff --git a/.gitea/workflows/build-app-macos.yml b/.gitea/workflows/build-app-macos.yml
index 240458f..def71b1 100644
--- a/.gitea/workflows/build-app-macos.yml
+++ b/.gitea/workflows/build-app-macos.yml
@@ -60,7 +60,13 @@ jobs:
           APPLE_API_KEY: ${{ secrets.APPLE_API_KEY }}
           APPLE_API_ISSUER: ${{ secrets.APPLE_API_ISSUER }}
           APPLE_API_KEY_PATH: ~/private_keys/AuthKey_${{ secrets.APPLE_API_KEY }}.p8
-        run: npm run tauri build
+        run: |
+          # If no signing identity is configured, use ad-hoc signing to prevent
+          # Tauri from auto-detecting local keychain certificates
+          if [ -z "${APPLE_SIGNING_IDENTITY}" ]; then
+            export APPLE_SIGNING_IDENTITY="-"
+          fi
+          npm run tauri build
 
       - name: Upload to release
         env: