In Macos 13 Ventura, after installing our app, it appears in Settings->General->Login Items with a line: Item from unidentified developer. I know there are other similar questions in this forums, the difference is we sign and build our code with the terminal, using a script. I am looking for a way to remove the warning and show the correct developer. We use an Apple Developer ID to sign and distribute the package from our own repositories. The code we use to sign(https://github.com/wazuh/wazuh-packages) is :
function sign_binaries() {
if [ -n "${KEYCHAIN}" ] && [ -n "${CERT_APPLICATION_ID}" ] ; then
security -v unlock-keychain -p "${KC_PASS}" "${KEYCHAIN}" > /dev/null
# Sign every single binary in Wazuh's installation. This also includes library files.
for bin in $(find ${INSTALLATION_PATH} -exec file {} \; | grep bit | cut -d: -f1); do
codesign -f --sign "${CERT_APPLICATION_ID}" --entitlements "${ENTITLEMENTS_PATH}" --deep --timestamp --options=runtime --verbose=4 "${bin}"
done
security -v lock-keychain "${KEYCHAIN}" > /dev/null
fi
}
function sign_pkg() {
if [ -n "${KEYCHAIN}" ] && [ -n "${CERT_INSTALLER_ID}" ] ; then
# Unlock the keychain to use the certificate
security -v unlock-keychain -p "${KC_PASS}" "${KEYCHAIN}" > /dev/null
# Sign the package
productsign --sign "${CERT_INSTALLER_ID}" --timestamp "${DESTINATION}"/"${pkg_name}" "${DESTINATION}"/"${pkg_name}".signed
mv "${DESTINATION}"/"${pkg_name}".signed "${DESTINATION}"/"${pkg_name}"
security -v lock-keychain "${KEYCHAIN}" > /dev/null
fi
}
Any help is welcome. Thanks!