ninja-build/ninja

Github MacOS Release blocked by Gatekeeper on Catalina

Open

#1695 opened on Dec 1, 2019

View on GitHub
 (8 comments) (0 reactions) (0 assignees)C++ (10,194 stars) (1,544 forks)batch import
help wantedmacOS

Description

Hello,

I finally upgraded to Mac OS Catalina, and due to the changes in Gatekeeper the version of ninja on the Github releases page is now blocked from running (v1.9.0). There doesn't appear to be a way to verify command line apps individually on Catalina, you can only disable it entirely (I may have misunderstood the instructions on the web-page I found).

I installed via brew instead, and that version runs fine. I am mostly reporting this issue for anyone else who has a problem with this, as I couldn't find mention of it already.

Contributor guide

Tech stack
None
Domain
release
Issue type
bug
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
half day
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
clear
Prerequisites
macOS environmentcode signing concepts
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
30
Research direction
Investigate the current release process for macOS binaries in the ninja repository. Look at the GitHub Actions workflow (likely in .github/workflows) or any release scripts to understand how the release artifacts are built. The fix would involve signing the binary with an Apple Developer ID and notarizing it to pass Gatekeeper on Catalina and later. Check if there are existing discussions in the issue comments (8 comments) for any proposed solutions or maintainer guidance. Consider adding a step in the CI pipeline to sign and notarize the executable before uploading to the release.