Faced same issue the --deep signing may not do what is expected. I found that --deep flag is depreciated and seems latest
https://keith.github.io/xcode-man-pages/codesign.1.html#deep
Looking forward to hear something from Apple about it.
spamshaker
Users receive reputation points by contributing quality content to the forums.
Posts include post and replies published on the forums.
Post authors can mark replies as Accepted to indicate successful solutions.
Apple Developer Forums admins can mark replies as Apple Recommended to indicate an approved solution
From
Kraków, Poland