[Bug]: wrongly signed binary triggers ASP protection on macos and prevents safe execution
Maintainers usually reply within 3 days
Assessment
This issue has not been assessed yet.
Description
Is there an existing issue for this?
- I have searched the existing issues
Current Behavior
Installed through homebrew, calling the binary triggers a security warning
In the logs (Console.app) we see ASP: Security policy would not allow process: 37023, /opt/homebrew/Caskroom/ovhcloud-cli/0.8.1/ovhcloud
Expected Behavior
Expected : the binary is launched
Steps To Reproduce
$ brew install --cask ovh/tap/ovhcloud-cli
$ ovhcloud --help
Anything else?
codesign shows no valid Authority for the signature
$ codesign -dvvv $(which ovhcloud)
Executable=/opt/homebrew/Caskroom/ovhcloud-cli/0.8.1/ovhcloud
Identifier=a.out
Format=Mach-O thin (arm64)
CodeDirectory v=20400 size=278366 flags=0x20002(adhoc,linker-signed) hashes=8696+0 location=embedded
Hash type=sha256 size=32
CandidateCDHash sha256=b61fe35cecee881481034f93fd11814188864445
CandidateCDHashFull sha256=b61fe35cecee881481034f93fd11814188864445252326753faec47bea30d8e3
Hash choices=sha256
CMSDigest=b61fe35cecee881481034f93fd11814188864445252326753faec47bea30d8e3
CMSDigestType=2
CDHash=b61fe35cecee881481034f93fd11814188864445
Signature=adhoc
Info.plist=not bound
TeamIdentifier=not set
Sealed Resources=none
Internal requirements=none
- Dominant language
- Go
- Stars
- 220
- Forks
- 38
- Avg merge
- 2d 14h
- Merged PRs (30d)
- 9
Getting set up
- Ships a Dockerfile or Docker Compose file
- Has a pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from ovh/ovhcloud-cli
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
ovh/ovhcloud-cli#309 ·
Maintainers usually reply within 3 days
-
Difficulty 4/5 1-2 days Newbie friendliness 48/100
ovh/ovhcloud-cli#303 ·
Maintainers usually reply within 3 days
-
[Feature]: Skill for this cliMay be free again A pull request for this issue was closed without being merged. Open
Difficulty 5/5 Over a week Newbie friendliness 35/100
ovh/ovhcloud-cli#207 ·
Maintainers usually reply within 3 days
-
[Feature]: Savings plan featureMay be free again @amstuta claimed this 120 days ago, and no pull request is open. Open
ovh/ovhcloud-cli#206 · 1 assignee ·
Maintainers usually reply within 3 days
-
Difficulty 5/5 Over a week Newbie friendliness 35/100
ovh/ovhcloud-cli#204 · 1 comment ·
Maintainers usually reply within 3 days
All issues in ovh/ovhcloud-cli
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 85/100
lognorman20/monaco#7428 ·
-
docs(prompts): IF BLOCKED workflow-scope branch says to comment on the issue on jira/local trackersOpenagent-butler-finding bug
Difficulty 2/5 1-3 hours Newbie friendliness 77/100
jordansmall/spindrift#6238 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 85/100
microcks/microcks-cli#608 · 1 comment ·
Maintainers usually reply within 1 day
-
bug from-studio
Difficulty 2/5 1-3 hours Newbie friendliness 65/100
esengine/DeepSeek-Reasonix#14868 ·
Maintainers usually reply within 1 day