Problem
Users who download jaw-lsp from GitHub releases on macOS hit a Gatekeeper warning:
"jaw-lsp" Not Opened — Apple could not verify "jaw-lsp" is free of malware that may harm your Mac or compromise your privacy.
This happens because the release binaries are unsigned/unnotarized, and the browser sets com.apple.quarantine on downloaded files.
Workaround
xattr -d com.apple.quarantine ~/.local/bin/jaw-lsp
Proposed fix
Add codesigning + notarization to the macOS release workflow:
- Sign with a Developer ID Application certificate
- Submit to Apple's notary service (
xcrun notarytool submit)
- Staple the notarization ticket (
xcrun stapler staple)
Requires repo secrets for the signing cert (.p12 + password) and an app-specific password / API key for notarytool.
Docs
Until this is in place, the README install section should mention the quarantine workaround for macOS users.
Problem
Users who download
jaw-lspfrom GitHub releases on macOS hit a Gatekeeper warning:This happens because the release binaries are unsigned/unnotarized, and the browser sets
com.apple.quarantineon downloaded files.Workaround
xattr -d com.apple.quarantine ~/.local/bin/jaw-lspProposed fix
Add codesigning + notarization to the macOS release workflow:
xcrun notarytool submit)xcrun stapler staple)Requires repo secrets for the signing cert (.p12 + password) and an app-specific password / API key for notarytool.
Docs
Until this is in place, the README install section should mention the quarantine workaround for macOS users.