Log In  


TL;DR are MacOS builds of Picotron (and Pico-8) intentionally distributed without code signing, and if so, would it be possible to inform users about this on the downloads page?

I got this alert when attempting to open the Mac build of Picotron (Alpha) v0.2.0h3.
Running codesign confirms (I hope?) that it isn't failing the check, rather it is not signed at all.

codesign -vvv --deep --strict /Applications/Picotron.app 
/Applications/Picotron.app: code object is not signed at all

Whether or not proper code signing/notarization is "worth it" is a discussion for a different day, but when not doing it, it is good practice to inform of this at the download stage. This way, users will know to expect this message which would otherwise be a serious sign of tampering, and the download page is also a good place to inform less savvy users of the workarounds required to get an unsigned app running.




[Please log in to post a comment]