[Bug]: wrongly signed binary triggers ASP protection on macos and prevents safe execution
Open
@rbeuque74 is already working on this.
Since Jan 12, 2026.
- Dominant language
- Go
- Stars
- 179
- Forks
- 35
- Avg merge
- 2d 10h
- Merged PRs (30d)
- 7
Description
Is there an existing issue for this?
- I have searched the existing issues
Current Behavior
Installed through homebrew, calling the binary triggers a security warning
In the logs (Console.app) we see ASP: Security policy would not allow process: 37023, /opt/homebrew/Caskroom/ovhcloud-cli/0.8.1/ovhcloud
Expected Behavior
Expected : the binary is launched
Steps To Reproduce
$ brew install --cask ovh/tap/ovhcloud-cli
$ ovhcloud --help
Anything else?
codesign shows no valid Authority for the signature
$ codesign -dvvv $(which ovhcloud)
Executable=/opt/homebrew/Caskroom/ovhcloud-cli/0.8.1/ovhcloud
Identifier=a.out
Format=Mach-O thin (arm64)
CodeDirectory v=20400 size=278366 flags=0x20002(adhoc,linker-signed) hashes=8696+0 location=embedded
Hash type=sha256 size=32
CandidateCDHash sha256=b61fe35cecee881481034f93fd11814188864445
CandidateCDHashFull sha256=b61fe35cecee881481034f93fd11814188864445252326753faec47bea30d8e3
Hash choices=sha256
CMSDigest=b61fe35cecee881481034f93fd11814188864445252326753faec47bea30d8e3
CMSDigestType=2
CDHash=b61fe35cecee881481034f93fd11814188864445
Signature=adhoc
Info.plist=not bound
TeamIdentifier=not set
Sealed Resources=none
Internal requirements=none
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.