microsoft / microsoft/DevSkim

Binaries on macOS are not notarized for GateKeeper

Open
#327 1 comment 1 reaction 1 assignee View on GitHub

@daalcant is already working on this.

Since Oct 22, 2021.

bug pipeline
Dominant language
C#
Stars
1k
Forks
131
Avg merge
1m
Merged PRs (30d)
1

Description

Describe the bug
The binaries for the latest release don't appear to be signed correctly for macOS. When trying to run, I had to manually approve every single binary to be able to run rather than it being accepted automatically.

To Reproduce
Steps to reproduce the behavior:

  1. Download v0.4.254 for macOS on a Mac
  2. Extract and run devskim

Expected behavior
The program should run without issue

Versions(please complete the following information):

  • OS: macOS 11.6
  • Devskim Version [e.g. 0.4.254]

Additional context
I haven't tried any other versions. And the first time I ran it, it ran correctly. When I wanted to run it via a call from python, I had to chmod +x devskim and then run via subprocess. That's when I started seeing it. The method of calling shouldn't make a different, but I've seen weirder things.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.