diff --git a/nym-vpn/desktop/nymvpn-packages/macos/build.sh b/nym-vpn/desktop/nymvpn-packages/macos/build.sh
index a5d541759d..d2cddc6bb4 100755
--- a/nym-vpn/desktop/nymvpn-packages/macos/build.sh
+++ b/nym-vpn/desktop/nymvpn-packages/macos/build.sh
@@ -23,6 +23,7 @@ if [[ ! -z "${APPLICATION_SIGNING_IDENTITY:-}" ]] && [[ ! -z "${APPLE_TEAM_ID:-}
         codesign \
             --force \
             --options runtime \
+            --keychain "/Users/runner/Library/Keychains/build.keychain-db" \
             --sign "${APPLICATION_SIGNING_IDENTITY}" \
             "${binary}"
     done
@@ -46,6 +47,7 @@ if [ ! -z "${INSTALLER_SIGNING_IDENTITY:-}" ]; then
     echo "Signing pkg"
     productsign \
         --sign "${INSTALLER_SIGNING_IDENTITY}" \
+        --keychain "/Users/runner/Library/Keychains/build.keychain-db" \
         "nymvpn-${VERSION}-unsigned.pkg" "nymvpn-${VERSION}.pkg"
 else
     mv "nymvpn-${VERSION}-unsigned.pkg" "nymvpn-${VERSION}.pkg"