Would you try
``` codesign --verify --deep --strict --verbose=2 /Applications/Geany.app ```
if it gives some strange results? It should simulate the signature verification process that happens during execution. I get
``` --prepared:/Applications/Geany.app/Contents/MacOS/geany-bin --validated:/Applications/Geany.app/Contents/MacOS/geany-bin /Applications/Geany.app: valid on disk /Applications/Geany.app: satisfies its Designated Requirement ```
on my computer.