From 294e72e6ff658b3fae8a38dc570ea4a7d0a731a7 Mon Sep 17 00:00:00 2001 From: Adrian Bonpin Date: Fri, 4 Sep 2026 02:32:43 +0000 Subject: [PATCH] chore: drop xattr postflight from Homebrew cask template (#17) --- packaging/homebrew/gridline.rb.template | 18 ++---------------- 1 file changed, 2 insertions(+), 16 deletions(-) diff --git a/packaging/homebrew/gridline.rb.template b/packaging/homebrew/gridline.rb.template index cbaa5e2..b662edd 100644 --- a/packaging/homebrew/gridline.rb.template +++ b/packaging/homebrew/gridline.rb.template @@ -11,13 +11,8 @@ # # brew install --cask gridline # -# QUARANTINE: Gridline is ad-hoc signed (not Developer-ID signed/notarized), -# so Homebrew casks (which deliberately set com.apple.quarantine on the -# downloaded artifact) would make Gatekeeper refuse to launch it. The -# `postflight` block strips the quarantine flag automatically — the standard -# GoReleaser-documented pattern for unsigned casks — so `brew install` works -# with no manual `xattr` step. This is a Gatekeeper bypass; drop the -# postflight once the app is properly signed + notarized. +# SIGNING: Gridline is Developer-ID signed + notarized, so macOS trusts it +# and no quarantine-stripping postflight is needed. cask "gridline" do arch arm: "aarch64", intel: "x64" @@ -35,15 +30,6 @@ cask "gridline" do app "Gridline.app" - # The "installation step" — strip the quarantine flag so the unsigned - # (ad-hoc signed) app launches without the Gatekeeper prompt. - postflight do - if OS.mac? - system_command "/usr/bin/xattr", - args: ["-dr", "com.apple.quarantine", "#{appdir}/Gridline.app"] - end - end - zap trash: [ "~/Library/Application Support/com.adrianbonpin.gridline", "~/Library/Caches/com.adrianbonpin.gridline",