aws-samples / aws-samples/bedrock-engineer

macOS apps should be signed by the developer, not the end user

Open
#335 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
486
Forks
68
PR merge metrics
No merged PRs in 30d

Description

The README contains several pieces of information that are incorrect.

- [Security warnings don't happen because things aren't installed from the app store](https://github.com/aws-samples/bedrock-engineer/blob/main/README.md?plain=1#L58), they happen because [you haven't followed basic procedure](https://developer.apple.com/help/account/)
- [End users do not codesign](https://github.com/aws-samples/bedrock-engineer/blob/main/README.md?plain=1#L62); [developers do](https://developer.apple.com/documentation/xcode/packaging-mac-software-for-distribution#Build-an-Installer-package)

AWS can afford to properly sign packages. This is a very serious issue you're passing onto your end users.

Contributor guide

Open the contributing guide

Research direction

Start in README.md around lines 58–62 and review the linked Apple account and Xcode packaging guidance. Confirm whether the requested change is documentation-only or also requires the macOS packaging workflow; done means the README accurately describes developer signing and the distributed app or package is signed by the developer.

Written by the indexing model from the issue text.

Assessment

Tech stack
macos
Domain
documentation, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
55/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.