zkokaja / Brewlet

The missing menulet for brew.sh: keeping your packages up-to-date, and your system secure.
BSD 2-Clause "Simplified" License
438 stars 13 forks source link

"Brewlet" cannot be opened because Apple cannot search for malware in it. #36

Open fkieling opened 1 year ago

fkieling commented 1 year ago

Since the update to MacOS Ventura 13.3, brewlet can no longer be started:

"Brewlet" cannot be opened because Apple cannot search for malware in it.

grafik

Please make brewlet working with MacOS Ventura 13.3 :)

zkokaja commented 1 year ago

Hi, you should be able to get it to open despite this message by going to System Settings -> Privacy & Security. There is usually a button where you can tell it to "Open Anyway". If you don't see it, open Brewlet again to get the same error, then go into System Settings. Hope that helps

alexanmaddielrya commented 10 months ago

Also, it will still throw an error because I highly doubt @zkokaja will pay $100 to remove gatekeeper warnings.

zkokaja commented 9 months ago

Is there a standard way of signing/sharing open source macos apps? I'm building mine with github actions, but don't know if that's the "best" way. I haven't looked into gatekeeper or the apple developer program fee.

TrevorSayre commented 7 months ago

For the English look of this as reference, on Sonoma 14.4.1:

image

And if you instead right-click on the Brewlet app and choose "Open":

image

To help with searching:

"Brewlet.app" can't be opened because Apple cannot check it for malicious software. This software needs to be updated. Contact the developer for more information.

I understand this can be bypassed, but it does erode trust in the software for some users. I wish Apple provided a way to manage this without having to pay a developer fee at least for open source software.

The issue is that the app has not been notarized by Apple.

Since you mentioned using GitHub Actions, check out these resources for help:

Thanks for all your wonderful work on this! I had been using cronjobs, but this is much prettier and brings some nice peace of mind, especially in the wake of things like the xz backdoor.