mercedes-benz / sechub

SecHub provides a central API to test software with different security tools.
https://mercedes-benz.github.io/sechub/
MIT License
268 stars 65 forks source link

Sechub is not allowed in MB MacBook #3577

Open zshareef opened 6 days ago

zshareef commented 6 days ago

Dear Colleagues,

I have recently upgraded my MacBook to new Mac Service in Mercedes-Benz. When I try to execute the binary of "sechub" as per recommendation from this page, I am getting an error that 'sechub' cannot be executed because it is not sure that is it a malware or not.

In System Settings --> Privacy and Security, I have clicked on "Allow Anyway" but it is not taking any action and it is still blocked.

I talked to MB Mac Support Channel and according to them "sechub has to change the package".

Could you please support me in this issue. I hope that many colleagues are using MacBook for development and they will encounter the same issue.

Thanks

haerter-tss commented 9 hours ago

Hi @zshareef

Thank you for bringing this issue to our attention. I have a solution for the problem you're experiencing on MacOS:

Please open up a terminal and change into the directory where the SecHub client is located. Then type in the following command: xattr -c ./sechub This removes all extendend attributes from the client which results in MacOS being able to run it.

However, I noticed that your issue contains internal information, such as internal links and mentions of Mercedes-Benz. For security and confidentiality reasons, please remove any internal information from the issue. In the future, kindly avoid including such details in public repositories.

Thank you for your understanding and cooperation.

Best regards, Rouven