With https://codereview.chromium.org/2187343003/ the executable target in ios_app_bundle targets depends on the output of codesign.py script and pass the generated file as an input to the link step. The generated file is listed on the "inputs" of the executable target.

If the script is modified, the code to generate the .xcrnt file is re-run as expected, but not the link action.