Skip to content

fix(release): ad-hoc codesign macOS .app to stop "damaged" Gatekeeper error #20

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
wct097 merged 1 commit into from
Jun 16, 2026
Merged

fix(release): ad-hoc codesign macOS .app to stop "damaged" Gatekeeper error #20

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 8 additions & 0 deletions .github/workflows/release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -66,6 +66,14 @@ jobs:
sed "s/@VERSION@/${version}/g" .github/macos/Info.plist > "$app/Contents/Info.plist"
# Fail loudly if the executable name ever drifts from CFBundleExecutable.
test -x "$app/Contents/MacOS/EftViewer.Desktop"
# Ad-hoc sign the whole bundle. Without a signature, Apple Silicon
# Gatekeeper treats a quarantined download as "damaged" and blocks
# even the right-click -> Open escape hatch. An ad-hoc signature
# downgrades that to the standard "unidentified developer" prompt,
# which users can clear with right-click -> Open. (Full notarization
# — the only way to remove the prompt entirely — is tracked separately.)
codesign --force --deep --sign - "$app"
codesign --verify --strict --verbose=2 "$app"
# ditto preserves bundle structure/symlinks/resource forks; plain zip can mangle .app bundles.
ditto -c -k --sequesterRsrc --keepParent "$app" "$archive"
else
Expand Down
Loading