Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Binaries on macOS are not notarized for GateKeeper #327

Open
dalemyers opened this issue Oct 12, 2021 · 1 comment
Open

Binaries on macOS are not notarized for GateKeeper #327

dalemyers opened this issue Oct 12, 2021 · 1 comment
Assignees

Comments

@dalemyers
Copy link

Describe the bug
The binaries for the latest release don't appear to be signed correctly for macOS. When trying to run, I had to manually approve every single binary to be able to run rather than it being accepted automatically.

To Reproduce
Steps to reproduce the behavior:

  1. Download v0.4.254 for macOS on a Mac
  2. Extract and run devskim

Expected behavior
The program should run without issue

Versions(please complete the following information):

  • OS: macOS 11.6
  • Devskim Version [e.g. 0.4.254]

Additional context
I haven't tried any other versions. And the first time I ran it, it ran correctly. When I wanted to run it via a call from python, I had to chmod +x devskim and then run via subprocess. That's when I started seeing it. The method of calling shouldn't make a different, but I've seen weirder things.

@dalemyers dalemyers added the bug label Oct 12, 2021
@gfs
Copy link
Contributor

gfs commented Oct 12, 2021

This is a known issue. Newer versions of Mac OS require apps be notarized - we are not able to "notarize" .NET binaries at this time due to restrictions from our signing service.

As a workaround you can install the .NET SDK and then dotnet tool install -g Microsoft.CST.DevSkim.CLI and then you'll be able to just call devskim from the terminal (this adds to the global path, you can also install it locally without the -g).

@gfs gfs changed the title Binaries on macOS release don't appear to be signed correctly Binaries on macOS are not notarized for GateKeeper Oct 12, 2021
@gfs gfs added the pipeline label Oct 12, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants