Skip to content

Ad-hoc sign the macOS app - #44

Merged
sangonz193 merged 1 commit into
mainfrom
adhoc-sign-macos
Sep 5, 2026
Merged

Ad-hoc sign the macOS app#44
sangonz193 merged 1 commit into
mainfrom
adhoc-sign-macos

Conversation

@sangonz193

Copy link
Copy Markdown
Owner

The macOS build is rejected on Apple silicon with "Git Nav is damaged and can't be opened", and the first-launch steps in the readme do not apply to it, because that dialog offers no way through.

The executable carries the signature the linker leaves behind, and the bundle assembled around it is never signed, so it has no Contents/_CodeSignature/CodeResources:

CodeDirectory ... flags=0x20002(adhoc,linker-signed)
Git Nav.app: code has no resources but signature indicates they must be present

Signing with Tauri's ad-hoc pseudo-identity signs the bundle. The app is still unidentified, so macOS still asks for it to be allowed through Privacy & Security, which is what the install instructions describe:

CodeDirectory ... flags=0x10002(adhoc,runtime)
Git Nav.app: valid on disk
Git Nav.app: satisfies its Designated Requirement

Verified against a bundle built from this change: quarantined, Gatekeeper now rejects it as unnotarized rather than as malformed. The updater artifact is packed from the same bundle, so it carries the signature too.

@vercel

vercel Bot commented Sep 5, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated
git-nav-site Skipped Skipped Sep 5, 2026 5:44am UTC

Request Review

@sangonz193
sangonz193 merged commit cc6a2fb into main Sep 5, 2026
6 checks passed
@sangonz193
sangonz193 deleted the adhoc-sign-macos branch September 5, 2026 05:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant