macOS: unsigned/unnotarized .dmg → "Werb est endommagé" on Apple Silicon #31

Source

User feedback (forum, v0.4.0, 2026-05-28) — Stanovitch.

Le téléchargement de Werb_0.4.0_aarch64.dmg ne veut pas s'ouvrir : « "Werb" est endommagé et ne peut pas être ouvert. Vous devriez placer cet élément dans la corbeille. » Je ne peux passer outre les réglages de sécurité […] Sans doute à cause des nouvelles puces.

Diagnosis

This is the classic unsigned + unnotarized + quarantine-bit Gatekeeper symptom, not a corrupt download. macOS sets com.apple.quarantine on the downloaded .dmg; with no valid Developer ID signature + notarization ticket, Gatekeeper reports the app as "damaged" (especially on Apple Silicon, where ad-hoc/unsigned arm64 binaries are refused harder than on Intel).

Confirmed: no signing config in the build.

• apps/desktop/src-tauri/tauri.conf.json — bundle has no macOS.signingIdentity / certificateFile / entitlements.
• .github/workflows/release-desktop.yml — tauri-action builds the macos-14 (aarch64) DMG with no APPLE_CERTIFICATE, APPLE_SIGNING_IDENTITY, APPLE_ID/APPLE_PASSWORD/APPLE_TEAM_ID env, and no notarization step.

Fix (proper)

1. Add an Apple Developer ID Application certificate + the codesign/notarize env to the release workflow (Tauri documents the APPLE_* variables consumed by tauri-action/tauri build).
2. Enable hardened runtime + notarization so the DMG passes Gatekeeper with no user action.

Interim (no Apple Developer account)

Document the workaround in the release notes / README so users aren't stuck:

• xattr -dr com.apple.quarantine /Applications/Werb.app (or on the mounted .dmg), or
• right-click → Open (Ventura+: System Settings → Privacy & Security → "Open Anyway").

Also worth noting: the PWA (https://werb-dev.github.io/werb) needs no install and sidesteps this entirely — surface it as the fallback for macOS users.