Unzipped application can’t be opened because it is from an unidentified developer

[aonez]

Similar to #293, some applications contained in a ZIP package appear to be unsigned (from an unidentified developer) after being extracted by Keka.

In fact, the app might be properly signed, but the system applies a quarantine flag that may render it unidentifiable. Since Keka is sandboxed, right now there's no permanent fix to that.

The reason in the comment below. There're some workarounds:

• Simply right click (or control click) and "Open". That way you can force to open it.
• Or manually remove the quarantine flag. Using the terminal:

  xattr -d -r com.apple.quarantine <APP_PATH>

This issue is connected with #215.
First reported via mail.

[aonez]

Turns out the Sublime Merge package contains extended attributes in ._ files. Keka does not apply those files, and that results in the signature check failure. Thanks to @alvarnell and @gingerbeardman for the feedback in #293.

It is recommended to archive applications in a supported file system HFS+/APFS the skip this kind of problems that do not just affect Keka.

[aonez]

It was reported here:
https://forum.sublimetext.com/t/invalid-code-signature-after-self-update-on-macos/39387

[aonez]

Invalid packages, like the ones commented in this issue, will be properly extracted in 1.1.6.