Operating System

Mac OS

(Linux only) Distribution

No response

(Linux only) Desktop Environment

No response

(Linux Only) Display Server

None

Installation Method

Homebrew & download from GitHub Releases

Xournal++ Version

1.2.5+dev (99228da)

libgtk Version

3.24.42

Bug Description

It seems that the binaries are not signed (any more?), leading to an error like "the application is broken and should be deleted"

Comparing with another application that is signed reveals:

❯ codesign -v /Applications/Xournal++.app
/Applications/Xournal++.app: code has no resources but signature indicates they must be present
❯ codesign -v /Applications/1Password.app
❯

Currently, the workaround is to manually remove the attribute:

xattr -d com.apple.quarantine /Applications/Xournal++.app

which is not good as it completely disables the security measures for this app.

Expected Behaviour

can install and use Xournal++ without errors

Steps to Reproduce

1. Install Xournal++
2. Try to open

Additional Context

The root cause is probable that with macOS 15.1 Apple removed the option to easily override the check, see https://developer.apple.com/news/?id=saqachfa and https://hackaday.com/2024/11/01/apple-forces-the-signing-of-applications-in-macos-sequoia-15-1/

I've seen this both with Xournal++ v1.2.5 and the nightly.

Given that now all MacOS users stumble over this I'd like to suggest to implement code signing.