macOS arm64 12.9.0 ZIP/Homebrew install fails code-signing verification and will not launch (kLSNoExecutableErr)

[aishwariyarao217]

Is there an existing issue for this?

• I have searched the tracker for existing similar issues and I know that duplicates will be closed

Describe the Issue

The macOS Apple Silicon build of Postman 12.9.0 downloads and extracts/installs successfully, but the resulting Postman.app fails macOS code-signing verification and cannot be opened.

I reproduced this with both:

1. The direct web download:

   • File: Postman for macOS (arm64).zip
   • SHA256: 116a1ee828ff514ee819c5947de2b810524ce73fc0824f94fbf9c5acd30623b4

2. Homebrew cask:

   • Cask: postman
   • Version: 12.9.0
   • Source: homebrew/cask
   • Cask URL: https://dl.pstmn.io/download/version/12.9.0/osx_arm64
   • Cask SHA256: 116a1ee828ff514ee819c5947de2b810524ce73fc0824f94fbf9c5acd30623b4
   • Installed path: /opt/homebrew/Caskroom/postman/12.9.0/Postman.app

This appears independent of my existing Postman profile/local app data. A clean extraction into /private/tmp, followed by removing extended attributes/quarantine, still fails codesign.

Environment:

• OS: macOS 15.7.3
• Build: 24G419
• Architecture: arm64
• Darwin kernel: 24.6.0
• Postman version: 12.9.0
• Bundle ID: com.postmanlabs.mac
• TeamIdentifier: H7H8Q7M5CK

Steps To Reproduce

Using the direct web download:

rm -rf /private/tmp/postman-zip-test
mkdir -p /private/tmp/postman-zip-test
unzip -q "$HOME/Downloads/Postman for macOS (arm64).zip" -d /private/tmp/postman-zip-test

xattr -cr /private/tmp/postman-zip-test/Postman.app

find /private/tmp/postman-zip-test/Postman.app -xattrname com.apple.quarantine -print 2>/dev/null | wc -l
find /private/tmp/postman-zip-test/Postman.app -xattrname com.apple.cs.CodeSignature -print 2>/dev/null | wc -l

codesign --verify --deep --strict --verbose=2 /private/tmp/postman-zip-test/Postman.app
codesign --verify --strict --verbose=2 "/private/tmp/postman-zip-test/Postman.app/Contents/Frameworks/Electron Framework.framework"

open /private/tmp/postman-zip-test/Postman.app
/private/tmp/postman-zip-test/Postman.app/Contents/MacOS/Postman --version

Using Homebrew:

brew install --cask postman

codesign --verify --deep --strict --verbose=2 /opt/homebrew/Caskroom/postman/12.9.0/Postman.app
open /opt/homebrew/Caskroom/postman/12.9.0/Postman.app

Actual result:

After xattr -cr, both xattr checks return zero:

0
0

But code signing still fails:

/private/tmp/postman-zip-test/Postman.app: invalid signature (code or signature have been modified)
In architecture: arm64
exit:1

The nested Electron framework also fails:

/private/tmp/postman-zip-test/Postman.app/Contents/Frameworks/Electron Framework.framework: invalid signature (code or signature have been modified)
In architecture: arm64
exit:1

The Homebrew-installed app fails the same way:

/opt/homebrew/Caskroom/postman/12.9.0/Postman.app: invalid signature (code or signature have been modified)
In architecture: arm64
exit:1

Opening the app fails:

The application cannot be opened for an unexpected reason,
error=Error Domain=NSOSStatusErrorDomain Code=-10827
"kLSNoExecutableErr: The executable is missing"

Direct executable launch exits with:

exit:134

Expected result:

The downloaded macOS arm64 ZIP and the Homebrew cask should install a Postman.app that passes:

codesign --verify --deep --strict --verbose=2 Postman.app

and launches normally.

Screenshots or Videos

No screenshots. This is a startup/signing failure before the UI opens.

Operating System

macOS

Postman Version

12.9.0

Postman Platform

Postman App

User Account Type

Signed In User

Additional Context?

This first appeared after a previous Postman self-update left /Applications/Postman.app with an invalid signature. I then tried both the latest direct web download and Homebrew.

Both install paths point to the same Postman 12.9.0 macOS arm64 artifact/checksum:

SHA256: 116a1ee828ff514ee819c5947de2b810524ce73fc0824f94fbf9c5acd30623b4

Relevant signing metadata:

Identifier=com.postmanlabs.mac
Format=app bundle with Mach-O thin (arm64)
TeamIdentifier=H7H8Q7M5CK
Runtime Version=15.2.0
Sealed Resources version=2 rules=13 files=16

Homebrew cask details:

postman: 12.9.0
Installed path: /opt/homebrew/Caskroom/postman/12.9.0/Postman.app
Installed using formulae.brew.sh API on 2026-05-04 at 12:29:19
Cask source: https://github.com/Homebrew/homebrew-cask/blob/HEAD/Casks/p/postman.rb
Cask URL: https://dl.pstmn.io/download/version/12.9.0/osx_arm64